TVN ID	TVN-202404012
CVE ID	CVE-2024-4301
CVSS	8.8 (High) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products	N-Reporter , N-Cloud Firmware before version 6.1.187 (20240216-1603)
Description	N-Reporter and N-Cloud, products of the N-Partner, have an OS Command Injection vulnerability. Remote attackers with normal user privilege can execute arbitrary system commands by manipulating user inputs on a specific page.
Solution	Update Firmware to 6.1.187 (20240216-1603) or later version
Credit	Alan Chung (DEVCORE)
Public Date	2024-04-29