7.2

CVE-2024-24386

Exploit
An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalpbx/scripts folder.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Vitalpbx ≫ Vitalpbx Version3.0.4
Vitalpbx ≫ Vitalpbx Version3.0.4-2
Vitalpbx ≫ Vitalpbx Version3.0.4-4
Vitalpbx ≫ Vitalpbx Version3.0.6-1
Vitalpbx ≫ Vitalpbx Version3.0.6-2
Vitalpbx ≫ Vitalpbx Version3.0.8 Update-
Vitalpbx ≫ Vitalpbx Version3.0.8 Updater2
Vitalpbx ≫ Vitalpbx Version3.0.8 Updater3
Vitalpbx ≫ Vitalpbx Version3.0.9 Updater3
Vitalpbx ≫ Vitalpbx Version3.0.9 Updater5
Vitalpbx ≫ Vitalpbx Version3.1.0
Vitalpbx ≫ Vitalpbx Version3.1.1 Update-
Vitalpbx ≫ Vitalpbx Version3.1.1 Updater2
Vitalpbx ≫ Vitalpbx Version3.1.1 Updater3
Vitalpbx ≫ Vitalpbx Version3.1.2 Updater1
Vitalpbx ≫ Vitalpbx Version3.1.3 Updater1
Vitalpbx ≫ Vitalpbx Version3.1.4 Updater1
Vitalpbx ≫ Vitalpbx Version3.1.4 Updater2
Vitalpbx ≫ Vitalpbx Version3.1.5 Updater1
Vitalpbx ≫ Vitalpbx Version3.1.5 Updater2
Vitalpbx ≫ Vitalpbx Version3.1.5 Updater3
Vitalpbx ≫ Vitalpbx Version3.1.5 Updater4
Vitalpbx ≫ Vitalpbx Version3.1.6 Updater1
Vitalpbx ≫ Vitalpbx Version3.1.7 Updater1
Vitalpbx ≫ Vitalpbx Version3.2.1
Vitalpbx ≫ Vitalpbx Version3.2.2 Updater1
Vitalpbx ≫ Vitalpbx Version3.2.3 Updater1
Vitalpbx ≫ Vitalpbx Version3.2.3 Updater2
Vitalpbx ≫ Vitalpbx Version3.2.3 Updater4
Vitalpbx ≫ Vitalpbx Version3.2.3 Updater5
Vitalpbx ≫ Vitalpbx Version3.2.3 Updater6
Vitalpbx ≫ Vitalpbx Version3.2.3 Updater7
Vitalpbx ≫ Vitalpbx Version3.2.3 Updater8
Vitalpbx ≫ Vitalpbx Version3.2.3 Updater9
Vitalpbx ≫ Vitalpbx Version3.2.4 Updater1
Vitalpbx ≫ Vitalpbx Version3.2.4 Updater2
Vitalpbx ≫ Vitalpbx Version3.2.4 Updater4
Vitalpbx ≫ Vitalpbx Version3.2.4 Updater5
Vitalpbx ≫ Vitalpbx Version3.2.4 Updater6
Vitalpbx ≫ Vitalpbx Version3.2.5 Updater1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.02% 0.59
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://erickduarte.notion.site/VitalPBX-3-2-4-5-ee402173241c493687aa22ec60160c67?pvs=4
Third Party Advisory
Exploit
https://github.com/erick-duarte/CVE-2024-24386
Third Party Advisory
Exploit