CVE-2024-4301

{"id": "CVE-2024-4301", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "twcert@cert.org.tw", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-04-29T04:15:09.110", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7776-035ff-1.html", "source": "twcert@cert.org.tw"}, {"url": "https://www.twcert.org.tw/tw/cp-132-7776-035ff-1.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "twcert@cert.org.tw", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "N-Reporter and N-Cloud, products of the N-Partner, have an OS Command Injection vulnerability. Remote attackers with normal user privilege can execute arbitrary system commands by manipulating user inputs on a specific page."}, {"lang": "es", "value": "N-Reporter y N-Cloud, productos de N-Partner, tienen una vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo. Los atacantes remotos con privilegios de usuario normales pueden ejecutar comandos arbitrarios del sistema manipulando las entradas del usuario en una p\u00e1gina espec\u00edfica."}], "lastModified": "2024-11-21T09:42:34.573", "sourceIdentifier": "twcert@cert.org.tw"}