CVE-2024-37845

MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Process Command feature

High · published October 25, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Process Command feature.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00771 · 55.2th percentile
Published
2024-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Process Command feature
    cvelistv5