CVE-2024-30167

/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a serverName parameter.

CVSS v3.1

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

1.14% chance of exploitation in the next 30 days, 64th percentile

Published

2026-05-08

Proof-of-concept exploits (1)

• RIZZZIOM/CVE-2024-30167

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52513

References

• CVE Record
• NVD entry

Related

• CVE-2021-27905
• CVE-2024-30163
• CVE-2024-30188
• CVE-2024-3015
• CVE-2024-30194
• CVE-2024-3014