CVE-2024-51721CWE-59

Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE

High · published November 12, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2024-11-12T18:05Z
EPSS history
Timeline
  • 12 NOV 18:05Z
    Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
    cvelistv5