PT-2025-2739 · Netalertx · Netalertx

Published

2024-09-28

·

Updated

2025-05-13

·

CVE-2024-46506

CVSS v3.1
10
VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

NetAlertx (affected versions not specified)

Description:

The issue is related to an unauthenticated Remote Code Execution (RCE) in NetAlertx. The vulnerability is being actively exploited. No specific details about affected devices or real-world attacks are provided. The issue seems to be discussed in various online platforms, including Twitter and Reddit, with references to a writeup by Rhino Security Labs. No technical details such as API endpoints, vulnerable parameters, or function names are explicitly mentioned in the descriptions.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Authentication

Path traversal

Command Injection

Missing Authentication

Related Identifiers

BDU:2025-02474
BDU:2025-02475
CVE-2024-46506

Affected Products

Netalertx