Lucene search
HistoryAug 14, 2024 - 8:15 p.m.
CVE-2024-27120
vulnerability
comfortkey
celsius benelux
unauthenticated attacker
sensitive information
remediated
version 24.1.2
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
39.1%
A Local File Inclusion vulnerability has been found in ComfortKey, a product of Celsius Benelux. Using this vulnerability, an unauthenticated attacker may retrieve sensitive information about the underlying system. The vulnerability has been remediated in version 24.1.2.
Affected configurations
Node
celsiusbeneluxcomfortkeyRange<24.1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| celsiusbenelux | comfortkey | * | cpe:2.3:a:celsiusbenelux:comfortkey:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-27120 Local File Inclusion in ComfortKey before version 24.1.2
2024-08-14 19:56:50
vulnrichment
vulnrichment
CVE-2024-27120 Local File Inclusion in ComfortKey before version 24.1.2
2024-08-14 19:56:50
cve
cve
CVE-2024-27120
2024-08-14 20:15:11
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
39.1%
Related for NVD:CVE-2024-27120