CVE-2024-44610

MEDIUM

PCAN-Ethernet Gateway <2.11.0 - Command Injection

Title source: llm
STIX 2.1

Description

PCAN-Ethernet Gateway FD before 1.3.0 and PCAN-Ethernet Gateway before 2.11.0 are vulnerable to Command injection via shell metacharacters in a Software Update to processing.php.

Exploits (1)

nomisec WORKING POC 1 stars
by BertoldVdb · poc
https://github.com/BertoldVdb/PcanExploit

References (2)

Scores

CVSS v3 5.6
EPSS 0.0170
EPSS Percentile 82.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-77
Status published
Published Oct 01, 2024
Tracked Since Feb 18, 2026