PT-2024-29673 · Wago · Cc100 0751-9X01+10

Diego Giubertoni + 1 · Published 2024-11-18 · Updated 2024-11-18 · CVE-2024-41973

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A low privileged remote attacker can specify an arbitrary file on the filesystem, which may lead to arbitrary file writes with root privileges. This issue allows a remote attacker with low privileges to choose any file on the filesystem, potentially enabling them to write any file with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

CWE-35

Related Identifiers

CVE-2024-41973

Affected Products

Cc100 0751-9X01

Edge Controller 0752-8303/8000-0002

Pfc100 G2 0750-811X-Xxxx-Xxxx

Pfc200 G2 0750-821X/Xxx-Xxx

Pfc200 G2 750-821X-Xxx-Xxx

Tp600 0762-420X/8000-000X

Tp600 0762-430X/8000-000X

Tp600 0762-520X/8000-000X

Tp600 0762-530X/8000-000X

Tp600 0762-620X/8000-000X

Tp600 0762-630X/8000-000X

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-41973 · Security Note
• https://cert.vde.com/en/advisories/VDE-2024-047 · Note
• https://t.me/cvedetector/11315 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1858478349326127565 · Twitter Post
• https://twitter.com/CVEnew/status/1858445673915437484 · Twitter Post