VulnerabilityDeferred

CVE-2024-12970

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection.

LOW 3.9EPSS 1.34%

Does this matter?

Lower severity and a low EPSS score (1.34%). Track it; it rarely justifies an emergency change on its own.

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2.

CVSS 3.1: 3.9 LOWCVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
EPSS: 1.34% probability · 70th percentile
CISA KEV: Not listed
Weakness: CWE-78
Source: iletisim@usom.gov.tr

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1900
https://www.usom.gov.tr/bildirim/tr-24-1900

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.