CVE-2024-12970
CVSS 3.1 Score 3.9 of 10 (low)
Details
Summary
CVE-2024-12970 is an OS Command Injection vulnerability affecting TUBITAK BILGEM Pardus OS My Computer. Before version 0.7.2, this software failed to properly neutralize special elements in OS commands, allowing attackers to inject malicious commands and potentially gain unauthorized system access. This issue poses a significant risk, as it can enable attackers to execute arbitrary system commands and potentially compromise the affected system. Users are strongly encouraged to upgrade to the latest version of Pardus OS My Computer to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.