CVE-2024-44722

| EUVD-2024-55479 CRITICAL
2026-03-20 mitre
9.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

3
Analysis Generated
Mar 20, 2026 - 14:00 vuln.today
EUVD ID Assigned
Mar 20, 2026 - 14:00 euvd
EUVD-2024-55479
CVE Published
Mar 20, 2026 - 00:00 nvd
CRITICAL 9.8

Tags

Code Injection RCE

Description

SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd.

Analysis

SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical Context

This vulnerability is classified as Code Injection (CWE-94), which allows attackers to inject and execute arbitrary code within the application. SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd. Affected products include: N/A.

Affected Products

N/A.

Remediation

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Never evaluate user-controlled input as code. Use sandboxing, disable dangerous functions, apply strict input validation.

Priority Score

49
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +49
POC: 0

Share

CVE-2024-44722 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy