Vulnerability · Published Feb 9, 2024 · Assigned by mitre
CVE-2024-23749
High 7.8
In plain English
A high-severity command injection in the affected software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.7% (higher than 92% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)4.7%top 8.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitization and validation, failure to escape special characters, and insecure system calls (at lines 2369-2390). This allows an attacker to add inputs inside the filename variable, leading to arbitrary code execution.
Affected products (as reported)
Weakness: CWE-77 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- http://packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html
- https://blog.defcesco.io/CVE-2024-23749
- 20240213 Command Injection Vulnerability in KiTTY Get Remote File Through SCP Input (CVE-2024-23749) mailing-list
- 20240213 Buffer Overflow Vulnerabilities in KiTTY Start Duplicated Session Hostname (CVE-2024-25003) & Username (CVE-2024-25004) Variables mailing-list