CVE-2023-44092CWE-78

OS Command Injection

High · published March 19, 2024

CVSS v3.1
7.6
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS Command Injection. This vulnerability allowed to create a reverse shell and execute commands in the OS. This issue affects Pandora FMS: from 700 through <776.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00846 · 57.6th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-03-19T16:32Z
EPSS history
Timeline
  • 19 MAR 16:32Z
    OS Command Injection
    cvelistv5