CVE-2024-44577 is a command injection vulnerability affecting RELY-PCIe software versions from 22.2.1 up to and including 23.1.0. The flaw is located in the time_date function, which improperly handles input, allowing an attacker with network access and low privileges to execute arbitrary commands without requiring user interaction. The vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command). The CVSS v3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported, and no official patch or remediation information is currently provided.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the affected system remotely, potentially leading to full compromise including unauthorized data access, modification, or service disruption. The vulnerability affects confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected service and limit privileges of users who can interact with the time_date function to reduce risk.