PT-2025-37867 · Vegagroup · Vega Master

Yunus Örnek · Published 2025-09-16 · Updated 2025-09-20 · CVE-2024-12367

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Vegagrup Software Vega Master versions 1.12.35 through 20250916

Description A vulnerability exists in Vegagrup Software Vega Master that allows directory indexing, potentially leading to exposure of sensitive system information to an unauthorized control sphere.

Recommendations Update Vegagrup Software Vega Master to a version later than 20250916.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2024-12367

Affected Products

Vega Master

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-12367 · Security Note
• https://twitter.com/CVEnew/status/1969291975548457074 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0249 · Note