Skip to content
OpenAdvisories
High · 8.6 CVE-2024-52058 EUVD-2024-46101GHSA-v6wv-qmhq-j5mp

Potential arbitrary command execution in System Designer while parsing malicious HTTP/REST requests

Published Dec 13, 2024 · Updated Feb 7, 2025 · Assigned by RTI

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in RTI Connext Professional (System Designer) allows OS Command Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.19.

Affected products

VendorProductAffectedFixed
RTI Connext Professional 7.0.0 – < 7.3.0.2, 6.1.0 – < 6.1.2.19 7.3.0.2

References