CVE-2024-5411

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
May 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-541107.5Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-541117.5Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-541127.5Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-541137.5Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect pCVE-2024-541147.5Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availabiCVE-2024-541157.5Out-of-bounds read vulnerability in the DASH module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-541167.5Out-of-bounds read vulnerability in the M3U8 module Impact: Successful exploitation of this vulnerability may cause features to perform abnoCVE-2024-541177.5Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-541197.5Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-54127.5A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50(ABOM.8)C0 could allow an unauthenCVE-2024-541205.9Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerability may cause featuresCVE-2024-541217.5Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abno
CVE-2024-5411: High severity, CVSS 8.8 | Vulnix