PT-2024-31186 · Rely-Pcie · Rely-Pcie

Published 2024-09-11 · Updated 2025-04-28 · CVE-2024-44571

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RELY-PCIe versions 22.2.1 through 23.1.0

Description The issue is related to incorrect access control in the mService function at the phpinf.php endpoint. This affects the ability to properly restrict access, potentially leading to unauthorized actions.

Recommendations For RELY-PCIe versions 22.2.1 through 23.1.0, consider restricting access to the phpinf.php endpoint until a patch is available. As a temporary workaround, disabling the mService function can help minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-44571

Affected Products

Rely-Pcie

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-44571 · Security Note
• https://osv.dev/vulnerability/CVE-2024-44571 · Vendor Advisory
• http://system-on-chip.com · Note
• https://t.me/cvedetector/5403 · Telegram Post
• https://t.me/cvenotify/120046 · Telegram Post
• https://twitter.com/CVEnew/status/1833923761290313861 · Twitter Post
• https://relyum.com/web/support/vulnerability-report · Note
• https://twitter.com/VulmonFeeds/status/1833950406679904670 · Twitter Post