← Database

CVE-2024-41889

CRITICAL CVSS: 9.8 Published: 2024-08-05 Modified: 2026-06-17

Description

Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker.

Affected Platforms

Pimax PitoolPimax Play

Weakness Type

NVD-CWE-Other, CWE-923

References