Vulnerability in Jpylypiw Easywall

CVE-2024-58275

Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server.

EPSS: 0.017 (74.3th percentile) — read the EPSS interpretation.

Affected products

Jpylypiw Easywall — versions 0.3.1

Weakness classification (CWE)

CWE-88 — Argument Injection

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)