Lucene search
K

CVE-2025-4653 Remote Code Execution leads to Command Injection

๐Ÿ—“๏ธย 10 Jun 2025ย 15:53:22Reported byย PandoraFMSTypeย 
cvelist
ย cvelist
๐Ÿ”—ย www.cve.org๐Ÿ‘ย 11ย Views

Remote Code Execution vulnerability in Pandora ITSM allows OS command injection via backup field.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-4653
10 Jun 202517:41
โ€“circl
CNNVD
PandoraFMS ITSM ๅฎ‰ๅ…จๆผๆดž
10 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-4653
10 Jun 202515:53
โ€“cve
EUVD
EUVD-2025-17710
10 Jun 202518:32
โ€“euvd
Metasploit
Pandora ITSM authenticated command injection leading to RCE via the backup function
7 Aug 202518:52
โ€“metasploit
NVD
CVE-2025-4653
10 Jun 202516:15
โ€“nvd
Packet Storm
๐Ÿ“„ Pandora ITSM Authenticated Command Injection
7 Aug 202500:00
โ€“packetstorm
Positive Technologies
PT-2025-24699 ยท Unknown ยท Pandora Itsm
10 Jun 202500:00
โ€“ptsecurity
Rapid7 Blog
Metasploit Wrap-Up 08/08/25
8 Aug 202515:57
โ€“rapid7blog
RedhatCVE
CVE-2025-4653
12 Jun 202516:10
โ€“redhatcve
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "all"
    ],
    "product": "Pandora ITSM",
    "vendor": "Pandora FMS",
    "versions": [
      {
        "lessThan": "5.0.106",
        "status": "affected",
        "version": "5.0.105",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation