PT-2024-20849 · Superscan · Superscan

Published 2024-11-11 · Updated 2025-06-24 · CVE-2024-25254

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SuperScan version 4.1

Description A buffer overflow issue was discovered in SuperScan, which occurs via the Hostname/IP parameter. This issue grants an attacker full control.

Recommendations For SuperScan version 4.1, patch immediately and restrict local network access to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to the Hostname/IP parameter until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-25254

Affected Products

Superscan

References · 8

• https://osv.dev/vulnerability/CVE-2024-25254 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25254 · Security Note
• https://t.me/cvenotify/102193 · Telegram Post
• https://twitter.com/oktsec/status/1856164424471457984 · Twitter Post
• https://t.me/cvenotify/126530 · Telegram Post
• https://twitter.com/CVEnew/status/1856113438373601536 · Twitter Post
• https://exploitart.ist/exploit/2023/09/18/superscan-os-command-injection.html · Note
• https://t.me/cvedetector/10550 · Telegram Post