Critical · 9.3 CVE-2024-35304 EUVD-2024-35275GHSA-hgc2-p5rv-xww2

System command injection through Netflow function

Published Jun 10, 2024 · Updated Aug 2, 2024 · Assigned by PandoraFMS

Vendor: Pandora FMS Product: Pandora FMS

Description

System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands. This issue affects Pandora FMS: from 700 through <777.

Affected products

Vendor	Product	Affected	Fixed
Pandora FMS	Pandora FMS	700 – < 777	777

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ vendor-advisory