Lucene search

K
wizblogWiz BlogWIZBLOG:5FAFDAABEF9BA8EDAE1FE4E27A82AA96
HistoryJun 10, 2024 - 5:08 p.m.

Critical RCE vulnerability in PHP CGI: everything you need to know

2024-06-1017:08:03
Wiz Blog
www.wiz.io
15
php cgi
remote code execution
cve-2024-4577
patch
vulnerability
organizations

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.967 High

EPSS

Percentile

99.7%

Detect and mitigate CVE-2024-4577, a critical remote code execution vulnerability in PHP CGI. Organizations are advised to patch urgently.

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.967 High

EPSS

Percentile

99.7%