Description
Scan2Net® 平台是 Image Access 所有 WideTEK® 和 Bookeye® 扫描仪的技术基础。Scan2Net®系统存在任意命令执行，攻击者可以获取服务器权限。
Scan2Net存在命令执行漏洞(CVE-2024-28138)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-28138
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-image-access-scan2net/
https://www.ddpoc.com/DVB-2025-8776.html
https://cve.imfht.com/detail/CVE-2024-28138?lang=en
https://security-tracker.debian.org/tracker/CVE-2024-28138
https://github.com/advisories/GHSA-fvgc-3wm9-ph8c
https://socradar.io/labs/app/cve-radar/CVE-2024-28138
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2024-28138