Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection
- Posted on January 9, 2025
- By The Hacker News
- 1 Views
Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection
CVE-2024-52875, a critical RCE flaw in GFI KerioControl firewalls, allows HTTP response splitting and exploits over 23,800 internet-exposed instances