CVE-2024-58275 is a command injection vulnerability affecting Easywall 0.3.1. The vulnerability exists in the /ports-save endpoint, where user-supplied input is not properly sanitized, allowing injection of shell metacharacters. This enables an authenticated attacker to execute arbitrary commands on the underlying server. The issue is classified under CWE-88 (Improper Neutralization of Argument Delimiters in a Command). The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an authenticated attacker to execute arbitrary commands on the Easywall server, potentially leading to full system compromise. This can affect confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the significant risk posed by this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /ports-save endpoint to trusted users only and monitor for suspicious activity. Avoid exposing Easywall instances to untrusted networks. Follow vendor channels for updates on patches or official mitigations.