Lucene search

China National Vulnerability DatabaseCNVD-2024-02175

HistoryDec 19, 2023 - 12:00 a.m.

MajorDoMo Command Execution Vulnerability (CNVD-2024-0217529)

2023-12-1900:00:00

China National Vulnerability Database

www.cnvd.org.cn

majordomo

diy smart home

automation platform

command execution

vulnerability

file thumb.php

filtering

arbitrary execution

cnvd-2024-0217529

AI Score

7.4

Confidence

High

EPSS

0.816

Percentile

98.4%

JSON

MajorDoMo is an open source DIY smart home automation platform from the MajorDoMo community. MajorDoMo suffers from a command execution vulnerability that stems from the file thumb.php failing to properly filter construct command special characters, commands, and more. An attacker can exploit this vulnerability to cause arbitrary command execution.