PT-2024-37346 · Vercom S.A. · Redlink Sdk

Maksymilian Motyl · Published 2024-09-30 · Updated 2025-10-03 · CVE-2024-6051

Positive Technologies (AI Summary)

CVSS v4.0

4.3

Medium

Base vector

AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Clear

Name of the Vulnerable Software and Affected Versions: Redlink SDK versions through 1.13

Description: A Cross Application Scripting vulnerability is present in Vercom S.A. Redlink SDK. In certain cases, it allows local code injection and manipulation of the view of a vulnerable application.

Recommendations: For Redlink SDK versions through 1.13, update to a version later than 1.13 to resolve the issue. As a temporary workaround, consider restricting access to the Redlink SDK until a patch is available.

Fix

Weakness Enumeration

CWE-926

CWE-99

Related Identifiers

CVE-2024-6051

Affected Products

Redlink Sdk

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-6051 · Security Note
• https://twitter.com/CVEnew/status/1840740571402338602 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1840763462445638020 · Twitter Post
• https://t.me/cvenotify/97031 · Telegram Post
• https://t.me/cvedetector/6651 · Telegram Post
• https://cert.pl/posts/2024/09/CVE-2024-6051 · Note
• https://t.me/cveNotify/137290 · Telegram Post
• https://cert.pl/en/posts/2024/09/CVE-2024-6051 · Note