7.8

CVE-2024-24916

DLL-HiJacking

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild400
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild402
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild404
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild406
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild407
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild409
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild410
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild412
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild413
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild414
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild416
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild417
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild418
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild420
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild423
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild424
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.10 Updatebuild425
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild640
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild641
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild645
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild646
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild649
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild651
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild653
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild654
   Microsoft ≫ Windows Version-
Checkpoint ≫ Smartconsole Versionr81.20 Updatebuild655
   Microsoft ≫ Windows Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.295
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cve@checkpoint.com 6.5 0.6 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.