PT-2024-33298 · Serviceware · Serviceware Processes

Published 2024-12-09 · Updated 2025-01-06 · CVE-2024-48956

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Serviceware Processes versions 6.0 through 7.3

Description The issue allows attackers without valid authentication to send a specially crafted HTTP request to a service endpoint, resulting in remote code execution.

Recommendations For Serviceware Processes versions 6.0 through 7.3, update to version 7.4 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-1394

CWE-120

Related Identifiers

CVE-2024-48956

Affected Products

Serviceware Processes

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-48956 · Security Note
• https://twitter.com/VulmonFeeds/status/1866264220611854683 · Twitter Post
• https://security.serviceware-se.com/CVE-2024-48956 · Note
• https://t.me/cvedetector/12441 · Telegram Post
• https://serviceware-se.com/platform/serviceware-processes · Note
• https://twitter.com/CVEnew/status/1866432957612745029 · Twitter Post