PT-2024-29672 · Wago · Cc100 0751-9X01+10

Diego Giubertoni + 1 · Published 2024-11-18 · Updated 2024-11-18 · CVE-2024-41972

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A low privileged remote attacker can overwrite an arbitrary file on the filesystem, which may lead to an arbitrary file read with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

CWE-35

Related Identifiers

CVE-2024-41972

Affected Products

Cc100 0751-9X01

Edge Controller 0752-8303/8000-0002

Pfc100 G2 0750-811X-Xxxx-Xxxx

Pfc200 G2 0750-821X/Xxx-Xxx

Pfc200 G2 750-821X-Xxx-Xxx

Tp600 0762-420X/8000-000X

Tp600 0762-430X/8000-000X

Tp600 0762-520X/8000-000X

Tp600 0762-530X/8000-000X

Tp600 0762-620X/8000-000X

Tp600 0762-630X/8000-000X

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-41972 · Security Note
• https://cert.vde.com/en/advisories/VDE-2024-047 · Note
• https://t.me/cvedetector/11322 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1858498828300669353 · Twitter Post
• https://t.me/cvenotify/101978 · Telegram Post
• https://twitter.com/CVEnew/status/1858445676037673292 · Twitter Post