VULNERABILITY INTELLIGENCE

CVE-2024-58275

CVSS score8.7 HIGH

EPSS probability1.80%

CISA KEVNot currently listed

Published2025-12-04

Last modified2026-09-26

Description

Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server.