CVE-2024-44623

An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2024-09-16

Last modified

2024-09-16

Weaknesses

CWE-94

Affected products

• Spx Graphics Controller (Spx)
• Spx Gc (Tuomoku)

References

• https://github.com/TuomoKu/SPX-GC
• https://github.com/TuomoKu/SPX-GC/blob/v.1.3.0/routes/routes-api.js#L39
• https://github.com/merbinr/CVE-2024-44623