by Kastro
Paper/Archive/CVE-2024-5743

CVE-2024-5743

EveHome Eve Play — Command Injection Vulnerability

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 31.7.317 × 206.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code. This issue affects Eve Play: through 1.1.42.

Affected

ProductAffectedFixed inSource
Eve Play≤ 1.1.42–CNA

Scores by source

ABB (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refevehome.com/en-us/security-content