CVE-2025-5306

Katalog CVE

CVSS 9.8 · Critical EPSS 35,7%

Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada artica pandora fms. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. This issue affects Pandora FMS 774 through 778

Rincian

Terbit di NVD

27 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

EPSS (30 hari)

35,7% peluang dieksploitasi; lebih tinggi dari 98,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ advisory vendor