CVE-2024-2421

2024-05-3018:15:09

CWE-78

[email protected]

web.nvd.nist.gov

lenels2

netbox

access control

event monitoring

unauthenticated rce

elevated permissions

cve-2024-2421

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.7%

JSON

LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands with elevated permissions.

References

www.cisa.gov/news-events/ics-advisories/icsa-24-151-01

www.corporate.carrier.com/Images/CARR-PSA-2024-01-NetBox_tcm558-227956.pdf