CVE-2024-22093CWE-77
Appliance mode iControl REST vulnerability
High · published February 14, 2024
What it is
When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on multi-bladed systems. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
The record
Technical detail
- CVSS v3.1
- 8.7 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00835 · 57.3th percentile
- Weakness
- CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
- Published
- 2024-02-14T16:30Z
EPSS history
Timeline