CVE-2024-8531CWE-347

CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is…

High · published October 11, 2024

CVSS v3.1
7.2
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could

compromise the Data Center Expert software when an upgrade bundle is manipulated to

include arbitrary bash scripts that are executed as root.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2024-10-11T13:50Z
EPSS history
Timeline
  • 11 OCT 13:50Z
    CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is…
    cvelistv5