PT-2024-33240 · Unknown · Automatic Systems Maintenance Slimlane

Published 2024-10-14 · Updated 2024-10-19 · CVE-2024-48822

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Automatic Systems Maintenance SlimLane version 29565 d74ecce0c1081d50546db573a499941b10799fb7

Description The issue allows a remote attacker to escalate privileges via the FtpConfig.php page. This can grant unauthorized access, potentially leading to system takeover.

Recommendations For version 29565 d74ecce0c1081d50546db573a499941b10799fb7, patch immediately to prevent system takeover. As a temporary workaround, consider restricting access to the FtpConfig.php page until a patch is available.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2024-48822

Affected Products

Automatic Systems Maintenance Slimlane

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-48822 · Security Note
• https://twitter.com/cracbot/status/1847518131939660207 · Twitter Post
• https://daly.wtf/multiple-vulnerabilities-discovered-in-automatic-systems-software · Note
• https://twitter.com/cracbot/status/1846793395651727595 · Twitter Post
• https://t.me/cvedetector/7864 · Telegram Post
• https://t.me/cvenotify/98009 · Telegram Post
• https://twitter.com/oktsec/status/1846062861820346413 · Twitter Post
• https://twitter.com/CVEnew/status/1845930455737983089 · Twitter Post