CVE-2024-48841CWE-77

Remote Code Execution (RCE) Vulnerabilities

Critical · published January 27, 2025

CVSS v4.0
10.0
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

🚨 A network attacker can waltz right in and execute arbitrary code with elevated privileges in FLXEON versions 9.3.4 and older! 🔥 Think of this like a waiter who can access the kitchen without any supervision, allowing them to cook whatever they want — potentially serving up a toxic dish instead of your favorite meal. This vulnerability gives attackers the same unchecked access. The consequences could be absolutely devastating. An attacker could seize control of your system, run malicious programs, and access sensitive data, all while you think everything is just fine. It's like handing over the keys to the castle and inviting them to redecorate as they please!

Put simply

Think of this like a waiter who can access the kitchen without any supervision, allowing them to cook whatever they want — potentially serving up a toxic dish instead of your favorite meal. This vulnerability gives attackers the same unchecked access. This vulnerability allows remote code execution due to improper network access controls, meaning an attacker can exploit the system by sending crafted requests that are erroneously trusted, leading to escalated privileges.

What to do

The consequences could be absolutely devastating. An attacker could seize control of your system, run malicious programs, and access sensitive data, all while you think everything is just fine. It's like handing over the keys to the castle and inviting them to redecorate as they please! To protect your systems, immediately upgrade FLXEON to version 9.3.5 or later. It’s crucial to review your network configurations to ensure that only authorized access is permitted. Don't forget to audit your security policies to catch any other lurking vulnerabilities! You've got this! Taking these steps will fortify your defenses and keep your systems secure! 🛡️

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.04402 · 91.3th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2025-01-27T19:25Z
EPSS history
Timeline
  • 27 JAN 19:25Z
    Remote Code Execution (RCE) Vulnerabilities
    cvelistv5