CVE-2024-44610

MEDIUM

PCAN-Ethernet Gateway <2.11.0 - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-44610. PoCs published by BertoldVdb.

AI-analyzed exploit summary This repository contains a functional Go-based exploit for CVE-2024-44610, targeting PEAK PCAN-Ethernet Gateway FD DR devices. It chains two command injection vulnerabilities to achieve authenticated root RCE via a bindshell.

Description

PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php.

Exploits (1)

nomisec WORKING POC 1 stars
by BertoldVdb · poc
https://github.com/BertoldVdb/PcanExploit

This repository contains a functional Go-based exploit for CVE-2024-44610, targeting PEAK PCAN-Ethernet Gateway FD DR devices. It chains two command injection vulnerabilities to achieve authenticated root RCE via a bindshell.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: PEAK PCAN-Ethernet Gateway FD DR (versions before 1.3.0/2.11.0)
Auth required
Prerequisites: Valid admin credentials for the web interface · Network access to the target device
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (2)

Core 2
Core References

Scores

CVSS v3 5.6
EPSS 0.0096
EPSS Percentile 56.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-77
Status published
Published Oct 01, 2024
Tracked Since Feb 18, 2026