Lucene search

TR-CERTCVE-2024-6917

HistoryAug 12, 2024 - 3:15 p.m.

CVE-2024-6917

2024-08-1215:15:21

CWE-78

TR-CERT

web.nvd.nist.gov

cve-2024-6917

os command injection

veribilim software

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

39.0%

JSON

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection.This issue affects Veribase Order Management: before v4.010.2.

Affected configurations

Nvd

Node

veribaseorder_managementRange<4.010.2

VendorProductVersionCPE
veribaseorder_management*cpe:2.3:a:veribase:order_management:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
veribase	order_management	*	cpe:2.3:a:veribase:order_management::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Veribase Order Management",
    "vendor": "Veribilim Software",
    "versions": [
      {
        "lessThan": "v4.010.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-24-1105

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

39.0%

JSON

Related for CVE-2024-6917