CVE-2024-2389

9.8 criticalEPSS 93%

Critical (9.8) in progress flowmon. EPSS 93% chance of exploitation in the next 30 days.

In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 93% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2024-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:flowmon

References

https://support.kemptechnologies.com/hc/en-us/articles/24878235038733-CVE-2024-2389-Flowmon-critical-security-vulnerability
https://www.flowmon.com
https://support.kemptechnologies.com/hc/en-us/articles/24878235038733-CVE-2024-2389-Flowmon-critical-security-vulnerability
https://www.flowmon.com

Check your stack JSON