PT-2024-26187

CVE-2024-34792

Published

2024-06-04

Updated

2024-06-10

Description by

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dextaz Ping versions 0.65 and earlier

Description The issue is related to an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. This allows Command Injection in Dextaz Ping.

Recommendations For versions 0.65 and earlier, update to a version that contains a fix for this issue, if available. As a temporary workaround, consider restricting access to the command execution functionality to minimize the risk of exploitation.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')