PT-2024-25314 · Aa Team · Wzone

Rafie Muhammad · Published 2024-06-09 · Updated 2024-11-01 · CVE-2024-33547

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WZone versions n/a through 14.0.10

Description A Missing Authorization vulnerability has been identified in AA-Team WZone. This issue allows for potential unauthorized access due to missing authorization checks. The estimated number of potentially affected devices worldwide is not specified. There is no information available about real-world incidents where this issue was exploited.

Recommendations For WZone versions n/a through 14.0.10, update to a version later than 14.0.10 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-33547

Affected Products

Wzone

References · 9

• https://osv.dev/vulnerability/CVE-2024-33547 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-33547 · Security Note
• https://twitter.com/cracbot/status/1801494836983566685 · Twitter Post
• https://t.me/cvenotify/82447 · Telegram Post
• https://twitter.com/linuxpatch/status/1799791258325393845 · Twitter Post
• https://twitter.com/CveFindCom/status/1799781160345567693 · Twitter Post
• https://patchstack.com/database/vulnerability/woozone/wordpress-wzone-plugin-14-0-10-site-wide-broken-access-control-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/100306 · Telegram Post
• https://twitter.com/CVEnew/status/1799786107355152668 · Twitter Post