Description
Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-interface allows authenticated command injection.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SEH Computertechnik | utnserver Pro | ≤ 20.1.22 | — |
| SEH Computertechnik | utnserver ProMAX | ≤ 20.1.22 | — |
| SEH Computertechnik | INU-100 | ≤ 20.1.22 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure http/cves/2024/CVE-2024-5421.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.