Lucene search

MitreCVE-2024-38886

HistoryAug 02, 2024 - 6:16 p.m.

CVE-2024-38886

2024-08-0218:16:19

CWE-940

mitre

web.nvd.nist.gov

caterease

traffic injection

remote attack

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.006

Percentile

78.5%

JSON

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel.

Affected configurations

Nvd

Node

horizoncloudcatereaseRange16.0.1.1663–24.0.1.2405

VendorProductVersionCPE
horizoncloudcaterease*cpe:2.3:a:horizoncloud:caterease:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
horizoncloud	caterease	*	cpe:2.3:a:horizoncloud:caterease::::::::

References

caterease.com

horizon.com

packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html

vuldb.com/?id.273370

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.006

Percentile

78.5%

JSON

Related for CVE-2024-38886