PT-2024-29850 · Unknown · Edgecross Basic Software For Windows+1

Published 2024-12-19 · Updated 2024-12-24 · CVE-2024-4230

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Edgecross Basic Software for Windows versions 1.00 and later Edgecross Basic Software for Developers versions 1.00 and later

Description The issue allows a malicious local attacker to execute arbitrary malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition.

Recommendations For Edgecross Basic Software for Windows versions 1.00 and later, consider restricting access to sensitive files and directories to minimize the risk of exploitation. For Edgecross Basic Software for Developers versions 1.00 and later, avoid using vulnerable file name or path parameters in local operations until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2024-4230

Affected Products

Edgecross Basic Software For Developers

Edgecross Basic Software For Windows

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-4230 · Security Note
• https://edgecross.org/client_info/EDGECROSS/view/userweb/ext/en/data-download/pdf/ECD-TE10-0003-01-EN.pdf · Vendor Advisory
• https://t.me/cvenotify/104869 · Telegram Post
• https://twitter.com/cracbot/status/1871435703772758291 · Twitter Post
• https://twitter.com/CVEnew/status/1869648542081421539 · Twitter Post
• https://t.me/cvedetector/13311 · Telegram Post
• https://t.me/latest_high_impact_cve/1673 · Telegram Post
• https://jvn.jp/vu/JVNVU92857077/index.html · Note