CVE-2024-2097

An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the…

High · published March 27, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

An authenticated malicious client can send a special LINQ query

to execute arbitrary code remotely (RCE) on the SCM server

from List control, and execute the arbitrary code on the same

system where SCMArchivedEventViewerTool is installed in the

case of SCM Tools.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Published
2024-03-27T02:26Z
EPSS history
Timeline
  • 27 MAR 02:26Z
    An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the…
    cvelistv5