CVE-2024-3498CWE-250

Incorrect Permission Assignment Privilege Escalation Vulnerability

High · published June 14, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page and elevate its privileges to root. As for the affected products/models/versions, see the reference URL.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.0th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2024-06-14T04:20Z
EPSS history
Timeline
  • 14 JUN 04:20Z
    Incorrect Permission Assignment Privilege Escalation Vulnerability
    cvelistv5