PT-2024-30546 · Mguard · Mguard

Andrea Palanca · Published 2024-09-10 · Updated 2024-09-27 · CVE-2024-43386

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mGuard devices (affected versions not specified)

Description A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL NOTIFICATION.TO. This allows for the execution of commands as root on mGuard devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the EMAIL NOTIFICATION.TO variable to minimize the risk of exploitation. Avoid using the EMAIL NOTIFICATION.TO variable in a way that could allow for the injection of special elements until the issue is resolved.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-43386

Affected Products

Mguard

References · 11

• https://osv.dev/vulnerability/CVE-2024-43386 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43386 · Security Note
• https://twitter.com/VulmonFeeds/status/1833458732484714852 · Twitter Post
• https://t.me/latest_high_impact_cve/1126 · Telegram Post
• https://t.me/cvedetector/5197 · Telegram Post
• https://twitter.com/cracbot/status/1834834559281860773 · Twitter Post
• https://twitter.com/AegisLens/status/1833526645422018910 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2024-039 · Note
• https://twitter.com/CveFindCom/status/1833430857924620683 · Twitter Post
• https://twitter.com/cracbot/status/1835196921922920491 · Twitter Post
• https://twitter.com/CVEnew/status/1833428047929729350 · Twitter Post