CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-2422 – LenelS2 NetBox Improper Neutralization of Argumented Delimiters
https://notcve.org/view.php?id=CVE-2024-2422
30 May 2024 — LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands. Se descubrió que el sistema de monitoreo de eventos y control de acceso LenelS2 NetBox contiene un RCE autenticado en versiones anteriores a la 5.6.1 incluida, lo que permite a un atacante ejecutar comandos maliciosos. • https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-01 • CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-2421 – LenelS2 NetBox Improper Neutralization of Special Elements
https://notcve.org/view.php?id=CVE-2024-2421
30 May 2024 — LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands with elevated permissions. Se descubrió que el sistema de monitoreo de eventos y control de acceso LenelS2 NetBox contenía un RCE no autenticado en versiones anteriores a la 5.6.1 incluida, lo que permite a un atacante ejecutar comandos maliciosos con permisos elevados. • https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-01 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 3CVE-2024-2420 – LenelS2 NetBox Hardcoded Credentials
https://notcve.org/view.php?id=CVE-2024-2420
30 May 2024 — LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows an attacker to bypass authentication requirements. Se descubrió que el sistema de control de acceso y monitoreo de eventos LenelS2 NetBox contiene credenciales codificadas en versiones anteriores a la 5.6.1 incluida, lo que permite a un atacante eludir los requisitos de autenticación. LenelS2 NetBox access control and event monitoring system was disc... • https://github.com/l00neyhacker/CVE-2024-24204 • CWE-259: Use of Hard-coded Password •