CVE-2024-5407
CVSS 3.1 Score 10.0 of 10 (high)
Details
Summary
CVE-2024-5407 is a vulnerability found in RhinOS 3.0-1190 that allows PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could potentially enable a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure. The affected product is RhinOS version 3.0-1190. To remediate this vulnerability, it is recommended to update to a patched version of RhinOS or apply relevant security patches provided by the vendor. This vulnerability poses a high danger to organizations as it can lead to unauthorized access and control over their systems, potentially resulting in data breaches and other malicious activities.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions