PT-2024-37607 · Parsec Automation · Parsec Automation Traksys

Gab3 · Published 2024-06-30 · Updated 2024-07-01 · CVE-2024-6414

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Parsec Automation TrakSYS versions 11.x.x

Description A problematic vulnerability has been found in the Export Page component of the affected software, specifically in the file TS/export/contentpage. The issue involves the manipulation of the ID argument, leading to a direct request. This can be exploited remotely. The vendor was contacted about the disclosure but did not respond.

Recommendations For versions 11.x.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2024-6414

Affected Products

Parsec Automation Traksys

References · 6

• 🔥 https://kiwiyumi.com/post/traksys-export-page-code · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-6414 · Security Note
• https://vuldb.com/?submit.361518 · Note
• https://vuldb.com/?id.270000 · Note
• https://vuldb.com/?ctiid.270000 · Note
• https://t.me/cvenotify/84856 · Telegram Post