Description
In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Flowmon | 11.X – < 11.1.14, 12.X – < 12.3.5 | 11.1.14 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 2 modules
-
Progress Flowmon Local sudo privilege escalation
exploit/linux/local/progress_flowmon_sudo_privesc_2024
-
Flowmon Unauthenticated Command Injection
exploit/linux/http/progress_flowmon_unauth_cmd_injection
GitHub 1 repository
-
adhikara13/CVE-2024-2389 ★ 2 · Apr 11, 2024
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Progress Kemp Flowmon - Command Injection http/cves/2024/CVE-2024-2389.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.