PT-2024-20253 · Unknown · Speedy11Cz Mcrpx

Speedy11Cz · Published 2024-03-18 · Updated 2024-08-28 · CVE-2024-24043

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Speedy11CZ MCRPX versions 1.4.0 and earlier

Description A Directory Traversal issue allows a local attacker to execute arbitrary code via a crafted file. This enables the attacker to potentially access and manipulate files outside the intended directory, leading to security breaches.

Recommendations For Speedy11CZ MCRPX versions 1.4.0 and earlier, update to a version later than 1.4.0 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-24043

Affected Products

Speedy11Cz Mcrpx

References · 7

• https://osv.dev/vulnerability/CVE-2024-24043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-24043 · Security Note
• https://github.com/Speedy11CZ/mcrpx/releases/tag/v1.4.1 · Note
• https://github.com/Speedy11CZ/mcrpx/commit/02ca6d1fd851567560046766ac9d04d20db35b8e · Note
• https://t.me/cvenotify/74227 · Telegram Post
• https://gist.github.com/apple502j/193358682885fe1a6708309ce934e4ed · Note
• https://twitter.com/CVEnew/status/1769976664027775406 · Twitter Post