VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 5, 2024· Updated Jun 17, 2026

CVE-2024-41889

CVE-2024-41889

Description

Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Pimax/Pimax productsllm-create
  • OpenMAR/PiToolllm-create
  • Pimax/Pimax Playv5
    Range: prior to V1.21.01
  • Pimax/Pitoolcpe-rescue2 versions
    all versions+ 1 more
    • (no CPE)range: all versions
    • cpe:2.3:a:pimax:pitool:-:*:*:*:*:*:*:*
  • Pimax/Play
    cpe:2.3:a:pimax:play:*:*:*:*:*:*:*:*
    Range: <1.21.01

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.