Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2024-25552: A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.
CVE-2024-25552 · published 2 years ago
Summary
A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| wut | com_port_redirector_legacy |
<= 3.93 cpe:2.3:a:wut:com_port_redirector_legacy:*:*:*:*:*:*:*:* |
| wut | com_port_redirector_plug_\&_play |
<= 4.42 cpe:2.3:a:wut:com_port_redirector_plug_\&_play:*:*:*:*:*:*:*:* |
| wut | opc_server |
<= 4.88 cpe:2.3:a:wut:opc_server:*:*:*:*:*:*:*:* |
Original advisory text
A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.
A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.
References
- https://cert.vde.com/en/advisories/VDE-2024-018 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-428Unquoted Search Path or Element
Timeline
Published1 Mar 2024
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2024-25552 · NVD
Track software like this
Free during beta