PT-2024-32092 · Enms · Enms

Published 2024-09-20 · Updated 2024-09-26 · CVE-2024-46647

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions eNMS versions 4.4.0 through 4.7.1

Description The issue is related to a Directory Traversal vulnerability. This vulnerability can be exploited through the upload files feature, allowing unauthorized access to sensitive files and directories.

Recommendations For eNMS versions 4.4.0 through 4.7.1, consider disabling the upload files feature until a patch is available to prevent potential exploitation. Restrict access to sensitive files and directories to minimize the risk of unauthorized access.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-46647

Affected Products

Enms

References · 6

• 🔥 https://github.com/skit-cyber-security/eNMS_vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-46647 · Security Note
• https://osv.dev/vulnerability/CVE-2024-46647 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1837265429711974717 · Twitter Post
• https://twitter.com/CVEnew/status/1837239326582693953 · Twitter Post
• https://t.me/cvedetector/6127 · Telegram Post