PT-2024-20336 · Newq · Secdiskapp

Kyungroul Lee + 1 · Published 2024-04-08 · Updated 2025-06-17 · CVE-2024-24279

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions secdiskapp version 1.5.1

Description An issue in the management program for NewQ Fingerprint Encryption Super Speed Flash Disk allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower functions.

Recommendations For secdiskapp version 1.5.1, as a temporary workaround, consider disabling the vsVerifyPassword and vsSetFingerPrintPower functions until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

CWE-261

Related Identifiers

CVE-2024-24279

GHSA-9FJ6-VR9P-PX49

Affected Products

Secdiskapp

References · 8

• https://github.com/BossSecuLab/Vulnerability_Reporting/security/advisories/GHSA-9fj6-vr9p-px49 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-24279 · Security Note
• https://osv.dev/vulnerability/CVE-2024-24279 · Vendor Advisory
• https://twitter.com/CVEnew/status/1777420542116610448 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1777464777746313345 · Twitter Post
• https://t.me/cvenotify/76146 · Telegram Post
• https://t.me/cvenotify/76082 · Telegram Post
• https://t.me/cvenotify/125988 · Telegram Post