CVE-2024-52058CWE-78

Potential arbitrary command execution in System Designer while parsing malicious HTTP/REST requests

High · published December 13, 2024

CVSS v4.0
8.6
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in RTI Connext Professional (System Designer) allows OS Command Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.19.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00634 · 49.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-12-13T10:17Z
EPSS history
Timeline
  • 13 DEC 10:17Z
    Potential arbitrary command execution in System Designer while parsing malicious HTTP/REST requests
    cvelistv5