What is CVE-2014-125124?

CVE-2014-125124 is a vulnerability in Artica St Pandora Fms, classified under OS Command Injection. Published 2025-07-31.

Is CVE-2014-125124 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Artica St Pandora Fms

CVE-2014-125124

An unauthenticated remote command execution vulnerability exists in Pandora FMS versions up to and including 5.0RC1 via the Anyterm web interface, which listens on TCP port 8023. The anyterm-module endpoint accepts unsanitized user input v…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.531 (98.0th percentile) — read the EPSS interpretation.

Affected products

Artica St Pandora Fms — versions 0

Weakness classification (CWE)

Public proof-of-concept exploits

References

raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/l… (exploit)
www.exploit-db.com/exploits/31518 (exploit)
www.vulncheck.com/advisories/pandora-fms-anyterm-unauth-command-injection (third-party-advisory)

Frequently asked questions

What is CVE-2014-125124?: CVE-2014-125124 is a vulnerability in Artica St Pandora Fms, classified under OS Command Injection. Published 2025-07-31.
Is CVE-2014-125124 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.