VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 13, 2024· Updated Feb 7, 2025

Potential arbitrary command execution in System Designer while parsing malicious HTTP/REST requests

CVE-2024-52058

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in RTI Connext Professional (System Designer) allows OS Command Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.19.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Rti/Connext Professionalllm-fuzzy2 versions
    <6.1.2.19 (6.1.x) / <7.3.0.2 (7.x)+ 1 more
    • (no CPE)range: <6.1.2.19 (6.1.x) / <7.3.0.2 (7.x)
    • (no CPE)range: 7.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.