Pandora FMS Remote Code Execution Vulnerability via OS Command Injection

A vulnerability allowing OS command injection that leads to remote code execution has been identified in Pandora FMS versions 700 to 777.6. This issue arises from improper neutralization of special elements used in commands, which can be exploited to execute arbitrary operating system commands on the server.

Impact

Exploitation of this vulnerability allows authenticated users to execute arbitrary OS commands, with the potential for those commands to be crafted to upload and execute malicious files, leading to remote code execution on the server.

Remediation

Users can upgrade to Pandora FMS versions 777.8 or 781 to address this vulnerability.