Critical Vulnerability in Huashi Private Cloud CDN Live Streaming Acceleration Server (VDB-265992)

CVE-2024-5241

4.7MEDIUM

Key Information

Vendor: Huashi
Status: Private Cloud Cdn Live Streaming Acceleration Server
Vendor: CVE Published:; 23 May 2024

Summary

A vulnerability was found in Huashi Private Cloud CDN Live Streaming Acceleration Server up to 20240520. It has been classified as critical. Affected is an unknown function of the file /manager/ipconfig_new.php. The manipulation of the argument dev leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265992.

Affected Version(s)

Private Cloud CDN Live Streaming Acceleration Server = 20240520

CVSS V3.1

Score:

4.7

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Timeline

Risk change from: null to: 4.7 - (MEDIUM)
May 23, 2024
Vulnerability published.
May 23, 2024
VulDB entry last update
May 22, 2024
Vulnerability Reserved.
May 22, 2024
VulDB entry created
May 22, 2024
Advisory disclosed
May 22, 2024

Collectors

NVD DatabaseMitre Database

Credit

H0e4a0r1t (VulDB User)