PT-2025-3438 · Evehome · Eve Play

Ville Salmela · CVE-2024-5743 · Published 2025-01-13 · Updated 2025-01-13

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eve Play versions through 1.1.42

Description An attacker could exploit the issue of using a password hash with insufficient computational effort in EveHome Eve Play to execute arbitrary code.

Recommendations For versions through 1.1.42, update to version 1.1.43 to resolve the issue.

Fix

Weakness Enumeration

CWE-916

Related Identifiers

CVE-2024-5743

Affected Products

Eve Play

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-5743 · Security Note
• https://twitter.com/CveFindCom/status/1878857375379071088 · Twitter Post
• https://evehome.com/en-us/security-content · Note
• https://twitter.com/CVEnew/status/1878859985511236023 · Twitter Post
• https://t.me/cvedetector/15164 · Telegram Post