Remote Code Execution Vulnerability in TuomoKu SPx-GC Product
CVE-2024-44623
9.8CRITICAL
Key Information:
- Vendor
- Spx
- Status
- Spx Graphics Controller
- Vendor
- CVE Published:
- 16 September 2024
Badges
👾 Exploit Exists🟡 Public PoC
Summary
A vulnerability exists in the TuomoKu SPx-GC software, impacting all versions up to 1.3.0. This security flaw allows a remote attacker to exploit the child_process.js function to execute arbitrary code within the application. This vulnerability poses substantial security risks, enabling attackers to potentially manipulate system operations or access sensitive data. It is crucial for users of the affected product to implement appropriate patches and security measures to safeguard their systems.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
- 🟡
Public PoC available
- 👾
Exploit known to exist