CVE-2024-53304

medium

Description

An issue in LRQA Nettitude PoshC2 after commit 09ee2cf allows unauthenticated attackers to connect to the C2 server and execute arbitrary commands via posing as an infected machine.

References

https://gist.github.com/fern89/3464e8428d7675e4f0f390a6b2b2842e

Details

Source: Mitre, NVD

Published: 2025-04-16

Updated: 2025-04-17

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N