PT-2024-31185 · Rely-Pcie · Rely-Pcie

Published 2024-09-11 · Updated 2025-04-28 · CVE-2024-44570

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RELY-PCIe versions 22.2.1 through 23.1.0

Description The issue is related to a code injection vulnerability via the getParams function in phpinf.php. This vulnerability allows for code injection, which can lead to unauthorized access and control.

Recommendations For versions 22.2.1 through 23.1.0, as a temporary workaround, consider disabling the getParams function in phpinf.php until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2024-44570

Affected Products

Rely-Pcie

References · 9

• https://osv.dev/vulnerability/CVE-2024-44570 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44570 · Security Note
• https://t.me/cvenotify/120063 · Telegram Post
• https://twitter.com/CVEnew/status/1833923760396927123 · Twitter Post
• https://t.me/cvenotify/94326 · Telegram Post
• http://system-on-chip.com · Note
• https://twitter.com/VulmonFeeds/status/1833957973091082436 · Twitter Post
• https://relyum.com/web/support/vulnerability-report · Note
• https://t.me/cvedetector/5400 · Telegram Post