Un authorized access via 'getcommand' query

CVE-2024-9166

What is CVE-2024-9166?

An unauthorized command execution vulnerability has been identified in the affected application, allowing attackers to execute system commands with elevated privileges. This vulnerability can be exploited through the 'getcommand' query, enabling attackers to gain root access to the system. Such capabilities pose substantial risks, including unauthorized data manipulation and system control. Affected users are advised to examine their security configurations and apply appropriate patches or mitigation strategies to safeguard their systems.

References