CVE-2024-50960

CVE-2024-50960 describes an OS command injection in Extron SMP devices via the Nmap diagnostic tool in the admin web console. A remote authenticated attacker with admin privileges can run arbitrary commands as root. Affected devices include Extron SMP 111 (≤3.01), SMP 351 (≤2.16), SMP 352 (≤2.16)...