2 matches found
CVE-2024-8808 Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability
Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is required to exploit this vulnerability. The specific flaw exists within the web...
8.8CVSS8.2AI score0.01582EPSS
SaveExploits0References2
CVE-2024-8808
CVE-2024-8808 affects Cohesive Networks VNS3. The risk stems from a flaw in the web service (listening on port 8000) where a user-supplied string is used to construct a system call without proper validation, allowing remote code execution with root privileges. Auth is required to exploit, and the...
8.8CVSS9.2AI score0.01582EPSS
SaveExploits0References2Affected Software1
20