PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-30167 Atlona CVE debrief

CVE-2024-30167 is a medium-severity vulnerability in the Atlona AT-OME-MS42 Matrix Switcher 1.1.2. The vulnerability allows remote authenticated users to execute arbitrary commands as root via a POST request with a serverName parameter. Defenders should assess exposure, prioritize remediation, and verify the authenticity of user input. This vulnerability has a CVSS score of 6.3 and a CVSS severity of MEDIUM. Affected product deployments should be identified in managed environments, and owners should be assigned for follow-up. The official advisory or CVE record should be reviewed to validate affected scope, severity, and vendor guidance. For exposed systems, compensating controls,

Vendor
Atlona
Product
AT-OME-MS42 Matrix Switcher 1.1.2
CVSS
MEDIUM 6.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-08
Original CVE updated
2026-10-28
Advisory published
2026-05-08
Advisory updated
2026-10-28

Who should care

Defenders responsible for the Atlona AT-OME-MS42 Matrix Switcher 1.1.2, operators, and security teams should assess exposure and prioritize remediation. This involves verifying the authenticity of user input to prevent command injection, restricting access to the vulnerable component, and monitoring system logs for suspicious activity. Those impacted should review relevant monitoring, detection, and logs for exposed

Why it matters

CVE-2024-30167 is a medium-severity vulnerability in the Atlona AT-OME-MS42 Matrix Switcher 1.1.2 that allows remote authenticated users to execute arbitrary commands as root. Defenders should assess exposure, prioritize remediation, and verify the authenticity of user input.

  • Verify the authenticity of user input to prevent command injection
  • Restrict access to the vulnerable component
  • Monitor system logs for suspicious activity

Technical summary

The Atlona AT-OME-MS42 Matrix Switcher 1.1.2 has a vulnerability that allows remote authenticated users to execute arbitrary commands as root via a POST request with a serverName parameter. The vulnerability has a CVSS score of 6.3 and a CVSS severity of MEDIUM.

Defensive priority

Defenders should prioritize verifying the authenticity of user input and restrict access to the vulnerable component.

Recommended defensive actions

  • Verify the authenticity of user input to prevent command injection
  • Restrict access to the vulnerable component
  • Monitor system logs for suspicious activity

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, but additional verification is required to confirm the scope of affected systems and remediation steps.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-30167 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-30167

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-30167 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-30167

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.