What is CVE-2024-51442?

CVE-2024-51442 is a vulnerability in N/a. Published 2025-01-08.

Is CVE-2024-51442 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2024-51442

Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file.

EPSS: 0.517 (98.0th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

mselbrede/CVE-2024-51442
ARPSyndicate/cve-scores
nomi-sec/PoC-in-GitHub

References

sourceforge.net/projects/minidlna/
sourceforge.net/p/minidlna/git/ci/master/tree/minidlna.c
sourceforge.net/p/minidlna/bugs/364/
github.com/mselbrede/CVE-2024-51442

Frequently asked questions

What is CVE-2024-51442?: CVE-2024-51442 is a vulnerability in N/a. Published 2025-01-08.
Is CVE-2024-51442 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.