PT-2025-20934 · Absolute Security · Absolute Persistence

Published 2025-05-13 · Updated 2025-11-19 · CVE-2024-6364

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:P/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions: Absolute Persistence versions prior to 2.8

Description: A vulnerability exists in Absolute Persistence when it is not activated, potentially allowing a skilled attacker with physical access to the device and full hostile network control to initiate OS commands on the device.

Recommendations: Update the device firmware to the latest available version. Please contact the device manufacturer for upgrade instructions or contact Absolute Security for further assistance.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-6364

Affected Products

Absolute Persistence

References · 7

• https://osv.dev/vulnerability/CVE-2024-6364 · Vendor Advisory
• https://absolute.com/platform/vulnerability-archive/cve-2024-6364 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6364 · Security Note
• https://t.me/cvenotify/122005 · Telegram Post
• https://absolute.com/platform/vulnerability-archive/CVE-2024-6364 · Note
• https://t.me/cveNotify/143402 · Telegram Post
• https://twitter.com/CVEnew/status/1922339782027575602 · Twitter Post