DLL Side-Loading Vulnerability in BeyondTrust U-Series Appliance
CVE-2024-4017

7.8HIGH

Key Information:

Vendor

BeyondTrust

Status
U-series Appliance
Vendor
CVE Published:
19 April 2024

What is CVE-2024-4017?

The vulnerability in the BeyondTrust U-Series Appliance on Windows relates to improper privilege management, specifically in filesystem modules. This flaw allows attackers to exploit DLL side-loading, which can lead to unauthorized execution of malicious DLLs. Versions affected include U-Series Appliance prior to 4.0.3, emphasizing the importance of updating to mitigate risks associated with this vulnerability.

References

https://www.beyondtrust.com/docs/release-notes/u-series-a...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.