PT-2024-23494 · Jnt Telecom · Jnt Liftcom Ums

S4Fv4N · Published 2024-04-15 · Updated 2024-08-01 · CVE-2024-30567

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions JNT Telecom JNT Liftcom UMS V1.J Core Version JM-V15

Description An issue in the software allows a remote attacker to execute arbitrary code via the Network Troubleshooting functionality.

Recommendations For JNT Telecom JNT Liftcom UMS V1.J Core Version JM-V15, consider disabling the Network Troubleshooting functionality as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-30567

Affected Products

Jnt Liftcom Ums

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-30567 · Security Note
• https://gist.github.com/s4fv4n/f0e8eccd0ce4bd1ac109fa2481c90ee6 · Note
• https://twitter.com/VulmonFeeds/status/1780115320558035168 · Twitter Post
• https://twitter.com/CVEnew/status/1780021387303817348 · Twitter Post