« Volver al listado

CVE-2024-3955

Estado: AplazadaCrítica (9.8)—

URL GET parameter "logtime" utilized within the "downloadlog" function from "cbpi/http_endpoints/http_system.py" is subsequently passed to the "os.system" function in "cbpi/controller/system_controller.py" without prior validation allowing to execute arbitrary code.This issue affects CraftBeerPi 4: from 4.0.0.58 (commit 563fae9) before 4.4.1.a1 (commit 57572c7).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Craftbeerpi — CraftbeerpiAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-3955",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-3955",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-05-02T17:35:00.248697Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cvd@cert.pl",
      "affectedData": [
        {
          "repo": "https://github.com/PiBrewing/craftbeerpi4",
          "vendor": "PiBrewing",
          "product": "CraftBeerPi 4",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.0.58 (commit 563fae9)",
              "lessThan": "4.4.1.a1 (commit 57572c7)",
              "versionType": "custom"
            }
          ],
          "collectionURL": "https://pypi.org/project/cbpi4/",
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://github.com/craftbeerpi/craftbeerpi4",
          "vendor": "CraftBeerPi - Brewing Controller",
          "product": "CraftBeerPi 4",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.0.58 (commit 563fae9)",
              "versionType": "git",
              "lessThanOrEqual": "*"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:pibrewing:craftbeerpi_4:4.0.0.58:*:*:*:*:*:*:*"
          ],
          "vendor": "PiBrewing",
          "product": "CraftBeerPi 4",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.0.58 (commit 563fae9)"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-05-02T10:15:08.630",
  "references": [
    {
      "url": "https://cert.pl/en/posts/2024/05/CVE-2024-3955/",
      "source": "cvd@cert.pl"
    },
    {
      "url": "https://cert.pl/posts/2024/05/CVE-2024-3955/",
      "source": "cvd@cert.pl"
    },
    {
      "url": "https://github.com/PiBrewing/craftbeerpi4/issues/132",
      "source": "cvd@cert.pl"
    },
    {
      "url": "https://cert.pl/en/posts/2024/05/CVE-2024-3955/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://cert.pl/posts/2024/05/CVE-2024-3955/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/PiBrewing/craftbeerpi4/issues/132",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cvd@cert.pl",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "URL GET parameter \"logtime\" utilized within the \"downloadlog\" function from \"cbpi/http_endpoints/http_system.py\" is subsequently passed to the \"os.system\" function in \"cbpi/controller/system_controller.py\" without prior validation allowing to execute arbitrary code.This issue affects CraftBeerPi 4: from 4.0.0.58 (commit 563fae9) before 4.4.1.a1 (commit 57572c7).\n\n"
    },
    {
      "lang": "es",
      "value": "El parámetro GET de URL \"logtime\" utilizado dentro de la función \"downloadlog\" de \"cbpi/http_endpoints/http_system.py\" se pasa posteriormente a la función \"os.system\" en \"cbpi/controller/system_controller.py\" sin validación previa que permita ejecutar código arbitrario. Este problema afecta a CraftBeerPi 4: desde 4.0.0.58 (commit 563fae9) antes de 4.4.1.a1 (commit 57572c7)."
    }
  ],
  "lastModified": "2026-06-17T07:45:32.740",
  "sourceIdentifier": "cvd@cert.pl"
}