2 matches found
CVE-2024-58275
Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server...
8.7CVSS0.01795EPSS
SaveExploits0References4
PT-2025-49131
Name of the Vulnerable Software and Affected Versions Easywall version 0.3.1 Description The software contains a flaw that permits authenticated remote command execution. This is due to a parameter injection weakness in the /ports-save API endpoint, allowing attackers to inject shell metacharacte...
8.7CVSS6.5AI score0.01795EPSS
SaveExploits0References8
20