Lucene search

K
akamaiblogKyle Lefton, Allen West & Sam TinklenbergAKAMAIBLOG:FFE343AECDF50E291D83D03435392925
HistoryJul 10, 2024 - 7:00 p.m.

CVE-2024-4577 Exploits in the Wild One Day After Disclosure

2024-07-1019:00:00
Kyle Lefton, Allen West & Sam Tinklenberg
www.akamai.com
21
akamai researchers
exploit attempts
disclosure.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.963

Percentile

99.6%

Akamai researchers have observed numerous exploit attempts for the PHP vulnerability CVE-2024-4577 as early as one day after disclosure.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.963

Percentile

99.6%