CVE-2024-44598

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module

High · published December 15, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

⚡ The C Base Module in FNT Command 13.4.0 has a sneaky code execution vulnerability just waiting to be exploited! 🔥 Think of this vulnerability like a software delivery service that allows anyone to send anonymous packages to your front door—if malicious code is in those packages, it can unleash chaos right in your home. An attacker could potentially execute arbitrary code on your system, leading to unauthorized access, data leaks, or even complete control over the affected environment. This could be absolutely devastating for your operations, as attackers could manipulate sensitive information or disrupt services.

Put simply

Think of this vulnerability like a software delivery service that allows anyone to send anonymous packages to your front door—if malicious code is in those packages, it can unleash chaos right in your home. This vulnerability allows code execution through the C Base Module, enabling attackers to run arbitrary commands on the server without proper authorization.

What to do

An attacker could potentially execute arbitrary code on your system, leading to unauthorized access, data leaks, or even complete control over the affected environment. This could be absolutely devastating for your operations, as attackers could manipulate sensitive information or disrupt services. To remediate this issue, promptly update to the latest version of FNT Command that addresses this vulnerability. Additionally, ensure that your access controls are strict, limiting who can send commands to the C Base Module. You’ve got this! Stay proactive and secure your systems today! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.3th percentile
Published
2025-12-15T00:00Z
EPSS history
Timeline
  • 15 DEC 00:00Z
    FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module
    cvelistv5