CVE-2023-44092

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS Command Injection. This vulnerability allowed to create a reverse shell and execute commands in the OS. This issue affects Pandora FMS: from 700 through <776.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Mar 19, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-440937.5Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affeCVE-2023-440945.3Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-440957.5Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.CVE-2023-440967.5Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service coCVE-2023-440977.5Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect serviCVE-2023-440987.5Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confidenCVE-2023-440997.5Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption.CVE-2023-44109.8A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiaCVE-2023-441007.5Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidenCVE-2023-441017.5The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability mayCVE-2023-441025.3Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth funCVE-2023-441037.5Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2023-44092: Critical severity, CVSS 9.1 | Vulnix