CVE-2024-5743

Command Injection Vulnerability

State: Published
Severity: 9.8 Critical
Published: Jan 13, 2025
Updated: Jan 13, 2025
Reserved: Jun 7, 2024

Description

An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code.

This issue affects Eve Play: through 1.1.42.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	ABB

Weaknesses

CWE-916 Use of Password Hash With Insufficient Computational Effort

Affected Products

Product	Versions
Eve PlayEveHome	1.1.42 and earlierAffected

References

https://www.evehome.com/en-us/security-content

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.