PT-2024-38049 · Genetech · Genetec Security Center

Louis Moubinous · Published 2024-11-05 · Updated 2024-11-09 · CVE-2024-7059

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Genetec Security Center versions prior to 5.12.2.1

Description A high-severity issue was found in the Genetec Security Center product line, allowing for arbitrary code execution on the system hosting the Web SDK role. This issue is related to an Unsafe Reflection problem. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations For versions prior to 5.12.2.1, upgrade the affected component to version 5.12.2.1 or later as soon as possible.

Fix

Weakness Enumeration

CWE-470

Related Identifiers

CVE-2024-7059

Affected Products

Genetec Security Center

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-7059 · Security Note
• https://twitter.com/CveFindCom/status/1853792085977022608 · Twitter Post
• https://resources.genetec.com/security-advisories/high-severity-vulnerability-affecting-security-center-web-sdk-role · Note
• https://t.me/cvenotify/101219 · Telegram Post
• https://twitter.com/oktsec/status/1853808964519026892 · Twitter Post
• https://ressources.genetec.com/bulletins-de-securite/vulnerabilite-de-haute-severite-affectant-le-role-sdk-web-de-security-center · Note
• https://t.me/cvedetector/9865 · Telegram Post
• https://twitter.com/CVEnew/status/1853791074382458973 · Twitter Post
• https://t.me/cvenotify/100657 · Telegram Post