This vulnerability, classified as CWE-94 (Improper Control of Generation of Code), exists in Logsign SIEM versions >=6.4.101 and <6.4.117. It allows code injection due to insufficient control over code generation processes. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation could lead to arbitrary code execution with the privileges of the attacker, potentially compromising confidentiality, integrity, and availability of the affected system. The vulnerability requires low complexity and only limited privileges, increasing risk within affected environments.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected versions and monitor for suspicious activity related to code injection attempts.