← CVE Intelligence

CVE-2024-26290

Authenticated Remote Command Injection affecting Avid NEXIS PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on underlying operating system with root permissions.This issue affects Avid NEXIS E-series: before 2024.6.0; Avid NEXIS F-series: before 2024.6.0; Avid NEXIS PRO+: before 2024.6.0; System Director Appliance (SDA+): before 2024.6.0.

Affected (CNA)

Vendor / productVersions
Avid / Avid NEXIS E-seriesaffected 0 before 2024.6.0
Avid / Avid NEXIS F-seriesaffected 0 before 2024.6.0
Avid / Avid NEXIS PRO+affected 0 before 2024.6.0
Avid / System Director Appliance (SDA+)affected 0 before 2024.6.0

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.