Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-36246

Опубликовано: 31 мая 2024
Источник: nvd
CVSS3: 9.8
CVSS3: 9.8
EPSS Низкий

Описание

Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted.

EPSS

Процентиль: 50%
0.0027
Низкий

9.8 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-862
CWE-862

Связанные уязвимости

CVSS3: 9.8
github
больше 1 года назад

Missing authorization vulnerability exists in Unifier and Unifier Cast Version.5.0 or later, and the patch "20240527" not applied. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be modified or deleted.

EPSS

Процентиль: 50%
0.0027
Низкий

9.8 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-862
CWE-862