PT-2024-37956 · Veribase · Veribase Order Management

Tunahan Tekeoğlu · Published 2024-08-12 · Updated 2026-06-03 · CVE-2024-6917

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Veribase Order Management versions prior to v4.010.2

Description The issue is related to an OS Command Injection vulnerability, which allows unauthorized access due to improper neutralization of special elements used in an OS command. This vulnerability affects Veribase Order Management software, enabling OS Command Injection exploits.

Recommendations For versions prior to v4.010.2, update to version v4.010.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the software to minimize the risk of exploitation.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-6917

Affected Products

Veribase Order Management

References · 12

• https://osv.dev/vulnerability/CVE-2024-6917 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6917 · Security Note
• https://twitter.com/CveFindCom/status/1823012111330472214 · Twitter Post
• https://t.me/cvedetector/2846 · Telegram Post
• https://t.me/cvenotify/90383 · Telegram Post
• https://twitter.com/Aptallar09/status/1823024672587260008 · Twitter Post
• https://twitter.com/PorsilapongoCl/status/1823016748355907642 · Twitter Post
• https://twitter.com/CVEnew/status/1823015841211859297 · Twitter Post
• https://t.me/cveNotify/165788 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1105 · Note
• https://usom.gov.tr/bildirim/tr-24-1105 · Note
• https://twitter.com/VulmonFeeds/status/1823037748015517955 · Twitter Post