Low Privileged Remote Attacker Can Write Arbitrary Files with Root Privileges

CVE-2024-41973

What is CVE-2024-41973?

A vulnerability has been identified in VDE products that allows a remote attacker, possessing low privileges, to specify arbitrary files on the server's filesystem. This flaw may enable unauthorized file writes with root privileges, posing a significant risk to the integrity and confidentiality of the affected systems. Attackers could leverage this vulnerability to manipulate critical system files, leading to potential exploitation and compromise of sensitive data.

References