{"id":"CVE-2024-11320","aliases":["EUVD-2024-33774","GHSA-882x-5jhv-r9x4"],"status":"published","title":"Command Injection leading to RCE via LDAP Misconfiguration","description":"Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through \u003c=777.4","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:L/SC:L/SI:L/SA:N/S:P/AU:N/R:U/V:C/RE:M/U:Amber","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.91202,"percentile":0.99812,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-77"],"published":"2024-11-21T10:03:08Z","modified":"2026-06-17T06:57:31Z","exploits":[{"source":"metasploit","id":"exploit/linux/http/pandora_fms_auth_rce_cve_2024_11320","title":"Pandora FMS authenticated command injection leading to RCE via LDAP using default DB password","type":"exploit","platform":"Linux,PHP,Unix","date":"2024-11-21","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/pandora_fms_auth_rce_cve_2024_11320"},{"source":"nuclei","id":"CVE-2024-11320","title":"Pandora v7.0NG.777.3 - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11320.yaml"},{"source":"pocgithub","id":"mhaskar/CVE-2024-11320","title":"mhaskar/CVE-2024-11320","date":"2024-12-01","url":"https://github.com/mhaskar/CVE-2024-11320"}],"products":[{"vendor":"pandora fms","product":"pandora fms"},{"vendor":"pandorafms","product":"pandora_fms"}],"references":[{"url":"https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/","tags":["Vendor Advisory"]},{"url":"https://github.com/advisories/GHSA-882x-5jhv-r9x4"}],"sources":{"cve":[{"id":"CVE-2024-11320","title":"Command Injection leading to RCE via LDAP Misconfiguration","description":"Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through \u003c=777.4","status":"published","published":"2024-11-21T10:03:08.739Z","modified":"2024-11-21T14:39:13.711Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:L/SC:L/SI:L/SA:N/S:P/AU:N/R:U/V:C/RE:M/U:Amber","level":"medium","assessor":"cna"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:34:19.965827Z"}],"euvd":[{"id":"EUVD-2024-33774","description":"Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through \u003c=777.4","status":"published","published":"2024-11-21T10:03:08Z","modified":"2024-11-21T14:39:13Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:L/SC:L/SI:L/SA:N/S:P/AU:N/R:U/V:C/RE:M/U:Amber","level":"medium"}],"updated_at":"2026-11-03T00:04:52.909214Z"}],"ghsa":[{"id":"GHSA-882x-5jhv-r9x4","title":"Arbitrary commands execution on the server by exploiting a command injection vulnerability in the...","description":"Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through \u003c=777.4","status":"published","published":"2024-11-26T18:38:51Z","modified":"2024-11-26T18:39:58Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:U/V:C/RE:M/U:Amber","level":"medium"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:58:58.204916Z"}],"nvd":[{"id":"CVE-2024-11320","description":"Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication mechanism. This issue affects Pandora FMS: from 700 through \u003c=777.4","status":"published","published":"2024-11-21T11:15:24.387Z","modified":"2026-06-17T06:57:31.91Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:H/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:U/V:C/RE:M/U:Amber","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:10:37.996328Z"}]}}