Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.0

Some versions of Command Centre Server and Workstations can run malicious code from the internet

CVE-2024-43690 · published 2 years ago
Summary

Versions of Command Centre Server and Workstation software prior to a certain update are at risk of allowing hackers to execute malicious code on the system. This means that if an attacker can trick the system into running their code, they could gain control of the system. We recommend updating to the latest version of the software to fix this issue.

Original advisory text
Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to perform Remote Code Execution (RCE). This issue affects: Co...
Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to perform Remote Code Execution (RCE).

This issue affects: Command Centre Server and Command Centre Workstations 9.10 prior to vEL9.10.1530 (MR2), 9.00 prior to vEL9.00.2168 (MR4), 8.90 prior to vEL8.90.2155 (MR5), 8.80 prior to vEL8.80.1938 (MR6), all versions of 8.70 and prior.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.0 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-829Inclusion of Functionality from Untrusted Control Sphere
Timeline
Published11 Sep 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-43690 · NVD
Track software like this
Free during beta