CVE Feed

    Dashboard / CVE / CVE-2024-7066

    CVE-2024-7066

    A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/config_time_sync.php of the component HTTP POST Request Handler. The manipulation of the argument ntp_server leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272347.

    Published:Jul 24, 2024
    Last Modified:Nov 21, 2024
    EPS:Jul 24, 2024
    EPSS Score:0.00915
    CVSS Score:7.3

    Affected Products

    Vendor
    F-logic
    Product
    Datacube3
    Vendor
    F-logic
    Product
    Datacube3 Firmware

    Exploits

    https://wiki.shikangsi.com/post/share/17dfab05-2c50-4437-afa7-ef1f5a1f43f8https://wiki.shikangsi.com/post/share/17dfab05-2c50-4437-afa7-ef1f5a1f43f8

    Related CVEs

    CVE-2024-34854 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`…
    CVE-2024-34852 (CVSS 6.3) — F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execut…
    CVE-2024-31750 (CVSS 9.8) — SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive informatio…
    CVE-2024-25831 (CVSS 5.4) — F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to impro…
    CVE-2024-25832 (CVSS 8.8) — F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious…
    CVE-2024-25833 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to unauthenticated SQL injection, which could allow an unauthenticated ma…
    CVE-2024-25830 (CVSS 9.8) — F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restricti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High