9.1
CVE-2024-24722
- EPSS 0.21%
- Published 19.02.2024 06:15:07
- Last modified 02.04.2025 20:07:37
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevated privileges via the 12d Synergy Server and/or 12d Synergy File Replication Server executable service path. This is fixed in 4.3.10.192, 5.1.5.221, and 5.1.6.235.
Data is provided by the National Vulnerability Database (NVD)
12dsynergy ≫ 12dsynergy Version < 4.3.10.192
12dsynergy ≫ 12dsynergy Version >= 5.1.1.58 < 5.1.5.221
12dsynergy ≫ 12dsynergy Version >= 5.1.6.210 < 5.1.6.235
12dsynergy ≫ File Replication Server Version < 4.3.10.192
12dsynergy ≫ File Replication Server Version >= 5.1.1.58 < 5.1.5.221
12dsynergy ≫ File Replication Server Version >= 5.1.6.210 < 5.1.6.235
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.435 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
CWE-428 Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.