CVE-2024-37770

CVE-2024-37770 설명 14Finger v1.1에서 지문fingerprint 기능에 원격 명령 실행RCE 취약점이 존재하는 것으로 확인되었습니다. 이 취약점으로 인해 공격자는 제작된 페이로드를 통해 임의의 명령을 실행할 수 있습니다. 공격 벡터 인증되지 않은 공격자는 셸 메타문자를 통해 명령 주입을 실행하여 원격 서버에서 RCE를 수행할 수 있습니다. 세부 정보 핵심 기능의 지문 스캔 지점에 인증되지 않은 원격 명령 실행 취약점이 존재합니다. 소스 코드 감사를 통해 onlyspider가 false이고 spider가...

CVE-2024-37770

14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2024-37770

14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2024-37770: Improper Control of Generation of Code

14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2024-37770

The 14Finger digital fingerprint collection utility (v1.1) contains a Remote Command Execution (RCE) vulnerability within its fingerprint function. The root cause is improper code generation where the application concatenates a URL into a CMD string and passes it to the Python subprocess module f...

CVE-2024-37770

14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2024-37770

14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

PT-2024-27742 · 14Finger · 14Finger

Name of the Vulnerable Software and Affected Versions: 14Finger version 1.1 Description: The issue is related to a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. Recommendations: For...