PT-2024-22271 · Unknown · Peering Manager

Ntc-Swiss-Team

·

CVE-2024-28114

·

Published

2024-03-12

·

Updated

2024-03-13

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Peering Manager versions <=1.8.2
Description Peering Manager is a BGP session management tool. There is a Server Side Template Injection issue that leads to Remote Code Execution, allowing arbitrary commands to be executed on the operating system running Peering Manager.
Recommendations For Peering Manager versions <=1.8.2, upgrade to version 1.8.3 to address the issue. At the moment, there are no known workarounds for this issue.

Exploit

Fix

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2024-28114
GHSA-Q37X-QFRX-JCV6

Affected Products

Peering Manager