Remote Code Execution Flaw in Huashi Private Cloud CDN Live Streaming Acceleration Server
CVE-2024-31032

Currently unrated

Key Information:

Vendor

Huashi

Vendor
CVE Published:
29 March 2024

What is CVE-2024-31032?

A security flaw in Huashi's Private Cloud CDN Live Streaming Acceleration Server (version 1.1.2) enables remote attackers to execute arbitrary code by leveraging the compromised manager/ipping.php component. This issue poses significant risks, as attackers can potentially gain unauthorized access and control over the affected system, leading to severe data breaches or service disruptions.

References

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.