CVE-2024-31408 - Vulnerability Details - OpenCVE

ReportizFlow

OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.

No CVSS v4.0

No CVSS v3.1

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://jvn.jp/en/jp/JVN41397971/
https://www.aiphone.net/important/20241016_1/
https://www.aiphone.net/important/20241016_2/
https://www.aiphone.net/support/software-documents/ix/
https://www.aiphone.net/support/software-documents/ixg/

History

Thu, 05 Dec 2024 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 22 Nov 2024 00:45:00 +0000

Type	Values Removed	Values Added
Description		OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request.
Weaknesses		CWE-78
References		https://jvn.jp/en/jp/JVN41397971/ https://www.aiphone.net/important/20241016_1/ https://www.aiphone.net/important/20241016_2/ https://www.aiphone.net/support/software-documents/ix/ https://www.aiphone.net/support/software-documents/ixg/
Metrics		cvssV3_0 `{'score': 8, 'vector': 'CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2024-11-22T00:10:50.954Z

Updated: 2024-12-05T20:44:27.398Z

Reserved: 2024-09-26T01:39:39.689Z

Link: CVE-2024-31408

Vulnrichment

Updated: 2024-12-05T20:44:22.483Z

NVD

Status : Received

Published: 2024-11-22T02:15:19.480

Modified: 2024-11-22T02:15:19.480

Link: CVE-2024-31408

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-31408", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2024-09-26T01:39:39.689Z", "datePublished": "2024-11-22T00:10:50.954Z", "dateUpdated": "2024-12-05T20:44:27.398Z"}, "containers": {"cna": {"affected": [{"vendor": "AIPHONE CO., LTD.", "product": "IX-MV", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HB", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HBT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HW", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HWT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HW-JP", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-B", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-BT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-W", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-WT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DAU", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DB", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DBT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EAT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EAU", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DV", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVT", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-P", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-L", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVM", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DU", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-RA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-2RA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BAU", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BB", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BBT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-FA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2G", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2GT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2G-N", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BU", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA-RA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA-2RA", "versions": [{"version": "firmware Ver.7.11 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-B", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-BT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-W", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-WT", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXW-MA", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SPMIC", "versions": [{"version": "firmware Ver.7.10 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-2C7", "versions": [{"version": "firmware Ver.3.01 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-2C7-L", "versions": [{"version": "firmware Ver.3.01 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-HID", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-HIDA", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-10K", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-MK", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-GW", "versions": [{"version": "firmware Ver.3.01 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-TGW", "versions": [{"version": "firmware Ver.3.01 and earlier", "status": "affected"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-LC", "versions": [{"version": "firmware Ver.3.00 and earlier", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request."}], "problemTypes": [{"descriptions": [{"description": "Improper neutralization of special elements used in an OS command ('OS Command Injection')", "lang": "en-US", "cweId": "CWE-78", "type": "CWE"}]}], "references": [{"url": "https://www.aiphone.net/important/20241016_1/"}, {"url": "https://www.aiphone.net/important/20241016_2/"}, {"url": "https://www.aiphone.net/support/software-documents/ix/"}, {"url": "https://www.aiphone.net/support/software-documents/ixg/"}, {"url": "https://jvn.jp/en/jp/JVN41397971/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_0": {"version": "3.0", "baseSeverity": "HIGH", "baseScore": 8, "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-11-22T00:10:50.954Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-05T20:39:22.522031Z", "id": "CVE-2024-31408", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-05T20:44:27.398Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-31408", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-12-05T20:39:22.522031Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-05T20:44:22.483Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "AIPHONE CO., LTD.", "product": "IX-MV", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HB", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HBT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HW", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HWT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-HW-JP", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-B", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-BT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-W", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-MV7-WT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DAU", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DB", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DBT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EAT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-EAU", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DV", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVT", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-P", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-L", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVM", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DU", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-RA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-DVF-2RA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BAU", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BB", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BBT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-FA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2G", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2GT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SS-2G-N", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-BU", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA-RA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SSA-2RA", "versions": [{"status": "affected", "version": "firmware Ver.7.11 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-B", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-BT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-W", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-RS-WT", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXW-MA", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IX-SPMIC", "versions": [{"status": "affected", "version": "firmware Ver.7.10 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-2C7", "versions": [{"status": "affected", "version": "firmware Ver.3.01 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-2C7-L", "versions": [{"status": "affected", "version": "firmware Ver.3.01 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-HID", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-HIDA", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-DM7-10K", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXG-MK", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-GW", "versions": [{"status": "affected", "version": "firmware Ver.3.01 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-TGW", "versions": [{"status": "affected", "version": "firmware Ver.3.01 and earlier"}]}, {"vendor": "AIPHONE CO., LTD.", "product": "IXGW-LC", "versions": [{"status": "affected", "version": "firmware Ver.3.00 and earlier"}]}], "references": [{"url": "https://www.aiphone.net/important/20241016_1/"}, {"url": "https://www.aiphone.net/important/20241016_2/"}, {"url": "https://www.aiphone.net/support/software-documents/ix/"}, {"url": "https://www.aiphone.net/support/software-documents/ixg/"}, {"url": "https://jvn.jp/en/jp/JVN41397971/"}], "descriptions": [{"lang": "en", "value": "OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker may execute an arbitrary OS command with root privileges by sending a specially crafted request."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-78", "description": "Improper neutralization of special elements used in an OS command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-11-22T00:10:50.954Z"}}}, "cveMetadata": {"cveId": "CVE-2024-31408", "state": "PUBLISHED", "dateUpdated": "2024-12-05T20:44:27.398Z", "dateReserved": "2024-09-26T01:39:39.689Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2024-11-22T00:10:50.954Z", "assignerShortName": "jpcert"}, "dataVersion": "5.1"}