CVE-2024-28211: Critical severity ngrinder vulnerability
Published Mar 7, 2024
·Updated
nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker.
Affected Software
2 affected components
nGrinder nGrinder<3.5.9
NAVER Ngrinder<3.5.9
Event History
Mar 7, 2024
CVE Published
via MITRE·04:49 AM
Data Sourced
via MITRE·04:49 AM
DescriptionWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-28211?
CVE-2024-28211 has a critical severity rating due to its potential for executing arbitrary code via JMX/RMI connections.
2
How do I fix CVE-2024-28211?
To fix CVE-2024-28211, upgrade to nGrinder version 3.5.9 or later.
3
What is the impact of CVE-2024-28211?
The impact of CVE-2024-28211 includes the possibility of remote code execution by attackers through malicious JMX/RMI servers.
4
Which versions of nGrinder are affected by CVE-2024-28211?
nGrinder versions prior to 3.5.9 are affected by CVE-2024-28211.
5
Can CVE-2024-28211 allow unauthorized access to my system?
Yes, CVE-2024-28211 can allow unauthorized access and control over your system if exploited through the vulnerable JMX/RMI connection.