High severityNVD Advisory· Published Dec 4, 2025· Updated Apr 15, 2026

CVE-2024-58275

Description

Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server.

Affected products

Jpylypiw/Easywallreferences

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jpylypiw.github.io/easywall/nvd
www.exploit-db.com/exploits/51856nvd
www.vulncheck.com/advisories/easywall-031-authentication-bypass-via-command-injection-in-ports-save-endpointnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000