PT-2024-18219 · Unknown · Tie Secure Relay

Published 2024-02-22 · Updated 2024-12-17 · CVE-2024-1683

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions TIE Secure Relay (affected versions not specified)

Description A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-1683

Affected Products

Tie Secure Relay

References · 7

• https://osv.dev/vulnerability/CVE-2024-1683 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1683 · Security Note
• https://twitter.com/cracbot/status/1761610562176172204 · Twitter Post
• https://t.me/cvenotify/104574 · Telegram Post
• https://t.me/cvenotify/72264 · Telegram Post
• https://twitter.com/CVEnew/status/1760832012003184798 · Twitter Post
• https://tenable.com/security/tns-2024-03 · Note