CVE-2024-5722

HIGH

Logsign Unified SecOps Platform 6.4.6-6.4.8 - Unauthenticated Remote Code Execution via Hard-coded Cryptographic Key

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-5722. PoCs published by byjanke.

AI-analyzed exploit summary This repository contains functional exploit code for CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection) in Logsign Unified SecOps Platform. The exploit chains these vulnerabilities to achieve unauthenticated remote code execution.

Description

Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP API. The issue results from using a hard-coded cryptographic key. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24170.

Exploits (1)

github WORKING POC 2 stars

by byjanke · pythonpoc

https://github.com/byjanke/logsign-rce

View Code ZIP pw:eip

This repository contains functional exploit code for CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection) in Logsign Unified SecOps Platform. The exploit chains these vulnerabilities to achieve unauthenticated remote code execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Logsign Unified SecOps Platform

No auth needed

Prerequisites: Network access to target · Target running vulnerable Logsign version

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

devstral-2 · analyzed Jun 13, 2026 Full analysis →

References (2)

Core 2

Core References

Third Party Advisory x_research-advisory

https://www.zerodayinitiative.com/advisories/ZDI-24-614/

Release Notes vendor-advisory

https://support.logsign.net/hc/en-us/articles/19316621924754-03-06-2024-Version-6-4-8-Release-Notes

Scores

CVSS v3 8.8

EPSS 0.0107

EPSS Percentile 60.4%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-321 CWE-798

Status published

Products (1)

logsign/unified_secops_platform 6.4.6 - 6.4.8

Published Nov 22, 2024

Tracked Since Feb 18, 2026