CVE-2024-45251: Elsight Halo Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

• Elsight Halo Firmware: from 11.7.1.5, before 11.9.4.0 (fixed in 11.9.4.0)
• Elsight Halo Version 11.7.1.5

Published 2024-10-06. Last modified 2026-06-17.