CVE-2024-2742CWE-78

OS Command Injection in Planet IGS-4215-16T2S

Medium · published March 21, 2024

CVSS v3.1
6.4
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

Operating system command injection vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. An authenticated attacker could execute arbitrary code on the remote host by exploiting IP address functionality.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00499 · 41.8th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-03-21T11:45Z
EPSS history
Timeline
  • 21 MAR 11:45Z
    OS Command Injection in Planet IGS-4215-16T2S
    cvelistv5