Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-10035

Опубликовано: 04 нояб. 2024
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command ('Command Injection'), Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in BG-TEK Informatics Security Technologies CoslatV3 allows Command Injection, Privilege Escalation.This issue affects CoslatV3: through 3.1069.

NOTE: The vendor was contacted and it was learned that the product is not supported.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:bg-tek:coslat:*:*:*:*:*:*:*:*
Версия от 3.0 (включая) до 3.1069 (включая)

EPSS

Процентиль: 74%
0.00848
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 9.8
github
больше 1 года назад

Improper Control of Generation of Code ('Code Injection') vulnerability in BG-TEK Informatics Security Technologies CoslatV3 allows Command Injection.This issue affects CoslatV3: through 3.1069. NOTE: The vendor was contacted and it was learned that the product is not supported.

EPSS

Процентиль: 74%
0.00848
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77