MegaSys Computer Technologies reports critical flaw in its Telenium Online Web Application
Learn More
MegaSys Computer Technologies has disclosed a critical security vulnerability in its Telenium Online Web Application. The Telenium Online Web Application from MegaSys Computer Technologies is a network management software used primarily in the telecommunications, energy, government, and utility sectors. It allows users to manage their networks effectively by providing real-time monitoring, fault management, and performance analysis.
The flaw, tracked as CVE-2024-6404 (CVSS score 9.8) arises from improper input validation in a Perl script used to load the login page. The vulnerability allows an attacker to inject arbitrary Perl code via a crafted HTTP request, leading to remote code execution on the server. This could result in significant security risks, including unauthorized system access and data compromise.
Affected Products are Telenium Online Web Application: Versions 8.3 and prior.
MegaSys Computer Technologies has released patches for the Telenium Online Web Application:
- Version 7.4.72
- Version 8.3.36
Users who are unable to immediately apply these patches are advised to disable the web/browser-based interface as a temporary mitigation.
