CVE-2024-52925CWE-94

In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature for software…

Medium · published February 26, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature for software encrypted USB drives.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-02-26T00:00Z
EPSS history
Timeline
  • 26 FEB 00:00Z
    In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature for software…
    cvelistv5