PT-2024-29133 · Ffri · Ffri Amc

Published 2024-07-30 · Updated 2024-08-01 · CVE-2024-40895

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions FFRI AMC versions 3.4.0 to 3.5.3 Some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3

Description The issue allows a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the executable file path is set to a batch file (.bat) or command file (.cmd) extension.

Recommendations For FFRI AMC versions 3.4.0 to 3.5.3, consider disabling the notification program setting until a patch is available. For some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3, restrict the executable file path to prevent setting it to a batch file (.bat) or command file (.cmd) extension. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-40895

Affected Products

Ffri Amc

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-40895 · Security Note
• https://skyseaclientview.net/news/240729_01 · Note
• https://t.me/cvenotify/87897 · Telegram Post
• https://support.nec.co.jp/View.aspx?id=3140109694 · Note
• https://ffri.jp/assets/files/other_docs/20240729.pdf · Note
• https://jvn.jp/en/jp/JVN26734798 · Note
• https://t.me/cvedetector/2028 · Telegram Post