CVE-2024-31843

An issue was discovered in Italtel Embrace 1.6.4. The Web application does not properly check the parameters sent as input before they are processed on the server side. This allows authenticated users to execute commands on the Operating System.
CVSS

No CVSS.

References
Link Resource
https://www.gruppotim.it/it/footer/red-team.html Exploit Third Party Advisory
https://www.gruppotim.it/it/footer/red-team.html Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:italtel:embrace:1.6.4:*:*:*:*:*:*:*

History

21 May 2025, 18:18

Type Values Removed Values Added
CPE cpe:2.3:a:italtel:embrace:1.6.4:*:*:*:*:*:*:*
References () https://www.gruppotim.it/it/footer/red-team.html - () https://www.gruppotim.it/it/footer/red-team.html - Exploit, Third Party Advisory
First Time Italtel
Italtel embrace

23 May 2024, 19:16

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-23 19:16

Updated : 2025-05-21 18:18


NVD link : CVE-2024-31843

Mitre link : CVE-2024-31843


JSON object : View

Products Affected

italtel

  • embrace
CWE

No CWE.