CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-31843: An issue was discovered in Italtel Embrace 1.6.4. The Web application does not properly check the parameters sent as input before they are...

Description

An issue was discovered in Italtel Embrace 1.6.4. The Web application does not properly check the parameters sent as input before they are processed on the server side. This allows authenticated users to execute commands on the Operating System.

Classification

CVE ID: CVE-2024-31843

Affected Products

Vendor: n/a

Product: n/a

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 12.26% (scored less or equal to compared to others)

EPSS Date: 2025-03-14 (when was this score calculated)

References

https://www.gruppotim.it/it/footer/red-team.html

Timeline