Lucene search
HistoryAug 12, 2024 - 1:38 p.m.
CVE-2024-7399
samsung magicinfo
directory limitation
arbitrary file
system authority
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
35.0%
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.
Affected configurations
Node
samsungmagicinfo_9_serverRange<21.1050
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samsung | magicinfo_9_server | * | cpe:2.3:a:samsung:magicinfo_9_server:*:*:*:*:*:*:*:* |
References
Related
vulnrichment
vulnrichment
CVE-2024-7399
2024-08-09 04:43:29
cvelist
cvelist
CVE-2024-7399
2024-08-09 04:43:29
cve
cve
CVE-2024-7399
2024-08-12 13:38:41
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
35.0%
Related for NVD:CVE-2024-7399