High severityNVD Advisory· Published Dec 4, 2025· Updated Apr 15, 2026

CVE-2024-58275

Description

Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jpylypiw/Easywallreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 0.3.1

Patches

Vulnerability mechanics

References

jpylypiw.github.io/easywall/nvd
www.exploit-db.com/exploits/51856nvd
www.vulncheck.com/advisories/easywall-031-authentication-bypass-via-command-injection-in-ports-save-endpointnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000