Improper input validation in Avid Nexis E-Series
CVE-2024-26290
Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on underlying operating system with root permissions.This issue affects Avid NEXIS E-series: before 2024.6.0; Avid NEXIS F-series: before 2024.6.0; Avid NEXIS PRO+: before 2024.6.0; System Director Appliance (SDA+): before 2024.6.0.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.
Affected products
- Avid Nexis E-series — versions 0
- Avid Nexis F-series — versions 0
- Avid Nexis Pro+ — versions 0
- Avid System Director Appliance (Sda+) — versions 0
Weakness classification (CWE)
References
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (third-party-advisory)
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (vendor-advisory)
- af854a3a-2127-422b-91ae-364da2661108