Unrated severityNVD Advisory· Published Apr 15, 2025· Updated Apr 18, 2025

CVE-2024-50960

Description

A command injection vulnerability in the Nmap diagnostic tool in the admin web console of Extron SMP 111 <=3.01, SMP 351 <=2.16, SMP 352 <= 2.16, and SME 211 <= 3.02, allows a remote authenticated attacker to execute arbitrary commands as root on the underlying operating system.

Affected products

Extron/SMP 111, SMP 351, SMP 352, SME 211description
Extron/SMP 111llm-create
Range: <=3.01
Extron/SMP 351llm-create
Range: <=2.16
Extron/SME 211llm-create
Range: <=3.02

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

ryanmroth.com/articles/exploiting-extron-smp-command-injectionmitre
www.extron.com/article/smpmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000