Privilege Escalation in Infoblox NIOS Affects Multiple Versions
CVE-2024-36046

9.8CRITICAL

Key Information:

Vendor

Infoblox

Status
NIOS
Vendor
CVE Published:
27 February 2025

What is CVE-2024-36046?

The vulnerability affects Infoblox NIOS versions up to 8.6.4, allowing the system to operate with excessive privileges. This could potentially enable unauthorized users to execute commands with elevated rights, leading to a compromise of the system's integrity and the exposure of sensitive data. Users are advised to review their systems for potential exploitation and implement necessary updates to mitigate risks.

References

https://support.infoblox.com/s/article/000010390

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.