CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-9987

Critical Severity
Pandorafms
SVRS
79/100

CVSSv3
8.8/10

EPSS
0.0008/1

Alert! CVE-2024-9987: A post-authentication SQL Injection vulnerability exists in Pandora FMS (versions 700 to less than 777.3) within the extensions/agents_modules_csv functionality. This vulnerability allows attackers to inject malicious SQL commands via the 'filters' parameter, potentially leading to unauthorized data access, modification, or deletion. With a CVSS score of 8.8 and a SOCRadar Vulnerability Risk Score (SVRS) of 79, this vulnerability is considered high-risk and requires immediate attention. Although the SVRS is just below the critical threshold of 80, the 'In The Wild' tag indicates active exploitation is occurring. Successful exploitation could compromise the entire Pandora FMS instance and sensitive data managed by it. Prioritize patching or mitigation to prevent potential data breaches and system compromise associated with this serious vulnerability.

In The Wild
CVSS:3.1
AV:N
AC:L
PR:L
UI:N
S:U
C:H
I:H
A:H
2024-10-22

2024-10-25
Eye Icon
SOCRadar
AI Insight

Description

CVE-2024-9987 is a vulnerability with a CVSS score of 0, indicating a low severity level. However, SOCRadar's unique 'SOCRadar Vulnerability Risk Score' (SVRS) assigns it a score of 30, highlighting the potential for exploitation. This discrepancy stems from SOCRadar's integration of various 'Vulnerability Intelligence' elements, including Social Media, News, Code Repositories, Dark/Deep Web data, and associations with Threat Actors and malware.

Key Insights

  • Active Exploitation: The vulnerability is actively exploited in the wild, posing an immediate threat to organizations.
  • Low CVSS Score: The CVSS score of 0 may underestimate the severity of the vulnerability, as it does not consider the broader context and potential impact identified by SOCRadar's SVRS.
  • SVRS Score of 30: The SVRS score of 30 indicates a moderate level of risk, warranting attention and prompt mitigation measures.
  • Unknown Description: The lack of a detailed description for CVE-2024-9987 limits the ability to fully understand its nature and potential impact.

Mitigation Strategies

  • Apply Software Updates: Install the latest software updates and patches to address the vulnerability.
  • Enable Intrusion Detection Systems (IDS): Implement IDS to detect and block malicious activity targeting the vulnerability.
  • Restrict Network Access: Limit access to vulnerable systems and services to reduce the attack surface.
  • Educate Users: Train users on security best practices and the importance of reporting suspicious activity.

Additional Information

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

777.3 LTS
Bruno Meineri2024-12-02
777.3 LTS | The post 777.3 LTS appeared first on Pandora FMS. <div class="et_pb_module et_pb_text et_pb_text
cve-2024-35308
cve-2024-9987
email_addresses
domains
Pandora FMS NG 779 RRR
Bruno Meineri2024-12-02
Pandora FMS NG 779 RRR | The post Pandora FMS NG 779 RRR appeared first on Pandora FMS. <div class="et_pb_module
cve-2024-35308
cve-2024-9987
email_addresses
domains
777.3 LTS
Bruno Meineri2024-11-18
777.3 LTS | The post 777.3 LTS appeared first on Pandora FMS. <div class="et_pb_module et_pb_text et_pb_text
pandorafms.com
rss
forum
news
777.3 LTS
Bruno Meineri2024-11-12
777.3 LTS | The post 777.3 LTS appeared first on Pandora FMS. <div class="et_pb_module et_pb_text et_pb_text
pandorafms.com
rss
forum
news
777.3 LTS
Bruno Meineri2024-10-21
777.3 LTS | The post 777.3 LTS appeared first on Pandora FMS. <div class="et_pb_module et_pb_text et_pb_text
pandorafms.com
rss
forum
news

Social Media

[CVE-2024-9987: HIGH] A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv functionality. This issue affects Pandora FMS: from 700 through &lt;777.3.#cybersecurity,#vulnerability https://t.co/nklR4ai4kq https://t.co/7Jhjca0WQP
0
0
0

Affected Software

Configuration 1
TypeVendorProduct
AppPandorafmspandora_fms

References

ReferenceLink
[email protected]https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

CWE Details

CWE IDCWE NameDescription
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence