CVE-2024-5407

CVSS 3.1 Score 10.0 of 10 (high)

Details

Published May 27, 2024
Updated: May 28, 2024
CWE ID 94

Summary

CVE-2024-5407 is a vulnerability found in RhinOS 3.0-1190 that allows PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could potentially enable a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure. The affected product is RhinOS version 3.0-1190. To remediate this vulnerability, it is recommended to update to a patched version of RhinOS or apply relevant security patches provided by the vendor. This vulnerability poses a high danger to organizations as it can lead to unauthorized access and control over their systems, potentially resulting in data breaches and other malicious activities.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-5407 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options