CVE Feed

    Dashboard / CVE / CVE-2024-34852

    CVE-2024-34852

    F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point in the ./admin/transceiver_schedule.php file. An unauthenticated remote attacker can exploit this vulnerability by sending a file name containing command injection. Successful exploitation of this vulnerability may allow the attacker to execute system commands.

    Published:May 28, 2024
    Last Modified:Jun 10, 2025
    EPS:May 28, 2024
    EPSS Score:0.01649
    CVSS Score:6.3

    Affected Products

    Vendor
    F-logic
    Product
    Datacube3
    Vendor
    F-logic
    Product
    Datacube3 Firmware

    Exploits

    https://github.com/Yang-Nankai/Vulnerabilities/blob/main/DataCube3%20Shell%20Code%20Injection.mdhttps://github.com/Yang-Nankai/Vulnerabilities/blob/main/DataCube3%20Shell%20Code%20Injection.md

    Related CVEs

    CVE-2024-7066 (CVSS 6.9) — A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnera…
    CVE-2024-34854 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`…
    CVE-2024-31750 (CVSS 9.8) — SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive informatio…
    CVE-2024-25831 (CVSS 5.4) — F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to impro…
    CVE-2024-25832 (CVSS 8.8) — F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious…
    CVE-2024-25833 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated ma…
    CVE-2024-25830 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restricti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High