Skip to content
OpenAdvisories
Critical ICSA-24-151-01 3 CVEs

LenelS2 NetBox

Published May 30, 2024 · Updated May 30, 2024

Vendor: LenelS2 Product: NetBox

Summary

Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute malicious commands with elevated permissions

Vulnerabilities 3

  • Critical 9.3
    CVE-2024-2421

    LenelS2 NetBox Improper Neutralization of Special Elements

    LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands with elevated permissions.

    LenelS2 NetBox
  • Critical 9.3
    CVE-2024-2422

    LenelS2 NetBox Improper Neutralization of Argumented Delimiters

    LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands.

    LenelS2 NetBox
  • High 8.8
    CVE-2024-2420

    LenelS2 NetBox Hardcoded Credentials

    LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows an attacker to bypass authentication requirements.

    LenelS2 NetBox

Revision history

  1. #1

    Initial Publication

References