{"id":"CVE-2024-2389","aliases":["EUVD-2024-27341","GHSA-9p5w-7f45-v3jm"],"status":"published","title":"Flowmon Unauthenticated Command Injection Vulnerability","description":"In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified.  An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.93037,"percentile":0.99834,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-78"],"published":"2024-04-02T12:22:45Z","modified":"2026-06-17T07:24:26Z","exploits":[{"source":"metasploit","id":"exploit/linux/http/progress_flowmon_unauth_cmd_injection","title":"Flowmon Unauthenticated Command Injection","type":"exploit","platform":"Linux,Unix","date":"2024-04-23","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/progress_flowmon_unauth_cmd_injection"},{"source":"metasploit","id":"exploit/linux/local/progress_flowmon_sudo_privesc_2024","title":"Progress Flowmon Local sudo privilege escalation","type":"exploit","platform":"Linux,Unix","date":"2024-03-19","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/progress_flowmon_sudo_privesc_2024"},{"source":"nuclei","id":"CVE-2024-2389","title":"Progress Kemp Flowmon - Command Injection","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2389.yaml"},{"source":"pocgithub","id":"adhikara13/CVE-2024-2389","title":"adhikara13/CVE-2024-2389","date":"2024-04-11","url":"https://github.com/adhikara13/CVE-2024-2389"}],"products":[{"vendor":"progress","product":"flowmon"},{"vendor":"progress","product":"flowmon_os"},{"vendor":"progress software","product":"flowmon"}],"references":[{"url":"https://www.flowmon.com","tags":["product","x_transferred","Product"]},{"url":"https://support.kemptechnologies.com/hc/en-us/articles/24878235038733-CVE-2024-2389-Flowmon-critical-security-vulnerability","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2389"},{"url":"https://github.com/advisories/GHSA-9p5w-7f45-v3jm"}],"sources":{"cve":[{"id":"CVE-2024-2389","title":"Flowmon Unauthenticated Command Injection Vulnerability","description":"In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified.  An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.\n\n","status":"published","published":"2024-04-02T12:22:45.131Z","modified":"2025-12-16T18:13:17.105Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:09.540667Z"}],"euvd":[{"id":"EUVD-2024-27341","description":"In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified.  An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.\n\n","status":"published","published":"2024-04-02T12:22:45Z","modified":"2025-12-16T18:13:17Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:04.646122Z"}],"ghsa":[{"id":"GHSA-9p5w-7f45-v3jm","title":"In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection...","description":"In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified.  An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.","status":"published","published":"2024-04-02T15:30:37Z","modified":"2025-02-07T18:32:14Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:59:50.611216Z"}],"nvd":[{"id":"CVE-2024-2389","description":"In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified.  An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.\n\n","status":"published","published":"2024-04-02T13:15:51.693Z","modified":"2026-06-17T07:24:26.2Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:09:46.373977Z"}]}}