Description
Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through <=777.4
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pandora FMS | Pandora FMS | 700 – ≤ 777.4 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Pandora FMS authenticated command injection leading to RCE via LDAP using default DB password
exploit/linux/http/pandora_fms_auth_rce_cve_2024_11320
GitHub 1 repository
-
mhaskar/CVE-2024-11320 ★ 9 · Dec 1, 2024
Exploit for Pandora FMS Remote Code Execution CVE-2024-11320
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Pandora v7.0NG.777.3 - Remote Code Execution http/cves/2024/CVE-2024-11320.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.