CVE-2024-7066: F-logic DataCube3 HTTP POST Request config_time_sync.php os command injection
First published: Wed Jul 24 2024(Updated: )
A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/config_time_sync.php of the component HTTP POST Request Handler. The manipulation of the argument ntp_server leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272347.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| F-logic Datacube3 Firmware | ||
| F-logic Datacube3 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7066?
CVE-2024-7066 has been declared as critical.
How do I fix CVE-2024-7066?
To fix CVE-2024-7066, ensure that the ntp_server argument in /admin/config_time_sync.php is properly secured and validated.
What component is affected by CVE-2024-7066?
CVE-2024-7066 affects the HTTP POST Request Handler of the component located at /admin/config_time_sync.php.
Which version of F-logic DataCube3 is impacted by CVE-2024-7066?
CVE-2024-7066 affects F-logic DataCube3 firmware version 1.0.
What type of vulnerability is CVE-2024-7066?
CVE-2024-7066 is a critical vulnerability involving OS command injection due to improper handling of the ntp_server argument.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/f-logic
- canonical/f-logic datacube3 firmware