Critical severity10.0NVD Advisory· Published Apr 2, 2024· Updated Jun 17, 2026

CVE-2024-2389

Description

In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progress (organisation)/Flowmon
cpe:2.3:a:progress:flowmon:*:*:*:*:*:*:*:*
Range: <11.1.14
Flowmon/Flowmonllm-fuzzy
Range: <11.1.14, <12.3.5
Progress Software/Flowmonv5
Range: 11.X

Patches

Vulnerability mechanics

References

support.kemptechnologies.com/hc/en-us/articles/24878235038733-CVE-2024-2389-Flowmon-critical-security-vulnerabilitynvdVendor Advisory
www.flowmon.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.074
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000