What is CVE-2024-5023?

CVE-2024-5023 is a vulnerability in Netflix Consoleme, classified under Command Injection. Published 2024-05-16.

Is CVE-2024-5023 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Netflix Consoleme

CVE-2024-5023

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.009 (56.0th percentile) — read the EPSS interpretation.

Affected products

Netflix Consoleme — versions 0

Weakness classification (CWE)

CWE-77 — Command Injection

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

security-report@netflix.com

Frequently asked questions

What is CVE-2024-5023?: CVE-2024-5023 is a vulnerability in Netflix Consoleme, classified under Command Injection. Published 2024-05-16.
Is CVE-2024-5023 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.