Podatność CVE-2024-38876
Publikacja: 2024-08-02

Opis:
A vulnerability has been identified in Omnivise T3000 Application Server (All versions >= R9.2), Omnivise T3000 Domain Controller (All versions >= R9.2), Omnivise T3000 Product Data Management (PDM) (All versions >= R9.2), Omnivise T3000 Terminal Server (All versions >= R9.2), Omnivise T3000 Thin Client (All versions >= R9.2), Omnivise T3000 Whitelisting Server (All versions >= R9.2). The affected application regularly executes user modifiable code as a privileged user. This could allow a local authenticated attacker to execute arbitrary code with elevated privileges.

Typ:

CWE-552

 (Files or Directories Accessible to External Parties)

 Referencje:
https://cert-portal.siemens.com/productcert/html/ssa-857368.html
Copyright 2024, cxsecurity.com

 

Back to Top