Low Privileged Remote Attacker Can Write Arbitrary Files with Root Privileges
CVE-2024-41973
8.1HIGH
Summary
A vulnerability has been identified in VDE products that allows a remote attacker, possessing low privileges, to specify arbitrary files on the server's filesystem. This flaw may enable unauthorized file writes with root privileges, posing a significant risk to the integrity and confidentiality of the affected systems. Attackers could leverage this vulnerability to manipulate critical system files, leading to potential exploitation and compromise of sensitive data.
Affected Version(s)
CC100 0751-9x01 0.0.0 <= 4.5.10 (FW27)
CC100 0751/9x01 0.0.0 <= 04.03.03 (72)
CC100 0751/9x01 0.0.0 <= 04.04.03 (70)
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Credit
Diego Giubertoni
Nozomi Networks