Vulnerability in Jpylypiw Easywall
CVE-2024-58275
Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server.
Published · last modified .
EPSS exploit prediction
EPSS: 0.018 (77.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 78th percentile — 77.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.018 · newest: 0.018 · change: 0.000
Affected products
- Jpylypiw Easywall — versions 0.3.1
Weakness classification (CWE)
References
- www.exploit-db.com/exploits/51856 (exploit)
- jpylypiw.github.io/easywall/ (product)
- github.com/jpylypiw/easywall (product)
- www.vulncheck.com/advisories/easywall-031-authentication-bypass-via-command-inj… (third-party-advisory)