Lucene search

TR-CERTCVELIST:CVE-2024-6917

HistoryAug 12, 2024 - 2:51 p.m.

CVE-2024-6917 RCE in Veribilim Software's Veribase Order Management

2024-08-1214:51:48

CWE-78

TR-CERT

www.cve.org

cve-2024-6917

rce

veribilim software

veribase order management

os command injection

vulnerability

version 4.010.2

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

EPSS

0.001

Percentile

39.0%

JSON

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection.This issue affects Veribase Order Management: before v4.010.2.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Veribase Order Management",
    "vendor": "Veribilim Software",
    "versions": [
      {
        "lessThan": "v4.010.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-24-1105

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

EPSS

0.001

Percentile

39.0%

JSON

Related for CVELIST:CVE-2024-6917