9.8
CVE-2024-26289
- EPSS 0.61%
- Veröffentlicht 27.05.2024 07:15:08
- Zuletzt bearbeitet 21.11.2024 09:02:18
- Quelle a6d3dc9e-0591-4a13-bce7-0f5b31
- CVE-Watchlists
- Unerledigt
Remote Code Inclusion Vulnerability in Multiple PMB Versions
Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Herstellerpmb_services
≫
Produkt
pmb
Default Statusunknown
Version
7.5.1
Version <
7.5.6-2
Status
affected
Version
7.4.1
Version <
7.4.9
Status
affected
Version
7.3.1
Version <
7.3.18
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.61% | 0.444 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
https://forge.sigb.net/projects/pmb/files
https://github.com/enisaeu/CNW/blob/main/advisories/2024/CNW-2024-A-12.md