CVE-2024-6917 is an OS Command Injection vulnerability (CWE-78) affecting Veribilim Software's Veribase Order Management versions before 4.010.2. The vulnerability arises from improper neutralization of special elements in OS commands, enabling remote attackers to execute arbitrary commands on the affected system without authentication or user interaction. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, availability, and security requirements. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary operating system commands on the affected Veribase Order Management system. This can lead to full compromise of the system, including unauthorized data access, modification, or destruction, and potential disruption of service. The CVSS score of 10.0 reflects the critical nature and high impact of this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider applying temporary mitigations such as restricting network access to the affected application and monitoring for suspicious activity related to command execution. Avoid exposing the Veribase Order Management system directly to untrusted networks. Follow vendor updates closely for the release of an official patch.