CVE-2024-50361

Summary

CVE-2024-50361 is a newly discovered vulnerability that affects select Advantech devices: EKI-6333AC-2G (versions <= 1.6.3), EKI-6333AC-2GD (versions <= v1.6.3), and EKI-6333AC-1GPO (versions <= v1.2.1). This issue is categorized as a CWE-78 "Improper Neutralization of Special Elements used in an OS Command (OS Command Injection)" vulnerability. The root cause lies in the certificate_file_remove API, which fails to adequately sanitize multiple input parameters before they are concatenated to OS-level commands. This oversight could potentially enable an attacker to inject malicious commands, leading to unauthorized system access and potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.