CVE-2024-5411

Name of the Vulnerable Software and Affected Versions: IAP-420 versions 2.01e and below

Description: The issue is related to missing input validation and OS command integration in the IAP-420 web-interface, allowing authenticated command injection.

Recommendations: For IAP-420 versions 2.01e and below, consider disabling access to the web-interface until a patch is available. As a temporary workaround, restrict access to the vulnerable web-interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.