Vulnerability · Published Oct 21, 2024 · Assigned by twcert
CVE-2024-10202Wellchoose Administrative Management System - OS Command Injection
High 8.8
In plain English
A high-severity OS command injection in Administrative Management System from Wellchoose. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)1.1%top 34.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Wellchoose | Administrative Management System | 0 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.twcert.org.tw/tw/cp-132-8162-dc491-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-8163-b701e-2.html third-party-advisory