CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-51442: Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf...
Description
Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file.
Classification
CVE ID: CVE-2024-51442
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 17.88% (scored less or equal to compared to others)
EPSS Date: 2025-02-06 (when was this score calculated)
References
https://sourceforge.net/projects/minidlna/https://sourceforge.net/p/minidlna/git/ci/master/tree/minidlna.c
https://sourceforge.net/p/minidlna/bugs/364/
https://github.com/mselbrede/CVE-2024-51442