CVE-2024-12970

LOW 3.9

OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer

CVSS Score

3.9

EPSS Score

2.7%

EPSS Percentile

86th

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2.

CWE	CWE-78
Vendor	tubitak bilgem
Product	pardus os my computer
Published	Jan 6, 2025
Last Updated	Jun 1, 2026

Stay Ahead of the Next One

Get instant alerts for tubitak bilgem pardus os my computer

Be the first to know when new low vulnerabilities affecting tubitak bilgem pardus os my computer are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Affected Versions

TUBITAK BILGEM / Pardus OS My Computer

0 < 0.7.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

usom.gov.tr: https://www.usom.gov.tr/bildirim/tr-24-1900 siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1900

Credits

Osman Can VURAL