Podatność CVE-2024-38876

Podatność CVE-2024-38876

Publikacja: 2024-08-02

Opis:

A vulnerability has been identified in Omnivise T3000 Application Server (All versions >= R9.2), Omnivise T3000 Domain Controller (All versions >= R9.2), Omnivise T3000 Product Data Management (PDM) (All versions >= R9.2), Omnivise T3000 Terminal Server (All versions >= R9.2), Omnivise T3000 Thin Client (All versions >= R9.2), Omnivise T3000 Whitelisting Server (All versions >= R9.2). The affected application regularly executes user modifiable code as a privileged user. This could allow a local authenticated attacker to execute arbitrary code with elevated privileges.

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:

	Tytuł	Autor	Data
Med.	Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download	Andreas Kolbeck	14.11.2024

Typ:

CWE-552

(Files or Directories Accessible to External Parties)

Referencje:

https://cert-portal.siemens.com/productcert/html/ssa-857368.html

Copyright 2024, cxsecurity.com