CVE-2024-12971CWE-77

QuickShell Authenticated Command Injection

High · published March 17, 2025

Patch now

High probability of exploitation

CVSS calls it high at 8.6. It sits in the 99.2th percentile for exploit probability.

CVSS v4.0

8.6

EPSS

61%

Percentile

99.2

In the wild

Unconfirmed

What it is

Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6

The record

Technical detail

CVSS v4.0: 8.6 · HIGH
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:C/RE:L/U:Green
EPSS: 0.61487 · 99.2th percentile
Weakness: CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published: 2025-03-17T09:19Z

EPSS history

Timeline

17 MAR 09:19Z
QuickShell Authenticated Command Injection
cvelistv5