9.1
CVE-2024-24722
- EPSS 0.21%
- Veröffentlicht 19.02.2024 06:15:07
- Zuletzt bearbeitet 02.04.2025 20:07:37
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevated privileges via the 12d Synergy Server and/or 12d Synergy File Replication Server executable service path. This is fixed in 4.3.10.192, 5.1.5.221, and 5.1.6.235.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
12dsynergy ≫ 12dsynergy Version < 4.3.10.192
12dsynergy ≫ 12dsynergy Version >= 5.1.1.58 < 5.1.5.221
12dsynergy ≫ 12dsynergy Version >= 5.1.6.210 < 5.1.6.235
12dsynergy ≫ File Replication Server Version < 4.3.10.192
12dsynergy ≫ File Replication Server Version >= 5.1.1.58 < 5.1.5.221
12dsynergy ≫ File Replication Server Version >= 5.1.6.210 < 5.1.6.235
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.435 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
CWE-428 Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.