CVE-2024-45252

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Score

CVSS 3.1 9.8 Critical

Status

Deferred - cna@cyber.gov.il

Published

2024-10-06

Last modified

2024-10-07

Weaknesses

CWE-78

Affected products

• Halo Firmware (Elsight)
• Halo Version 11.7.1.5 (Elsight)

References

• https://www.gov.il/en/Departments/faq/cve_advisories