CVE-2024-9536

Summary

CVE-2024-9536 is a newly disclosed critical vulnerability affecting ESAFENET CDG V5. This issue lies in an unknown functionality of the /MultiServerBackService?path=1 file. Attackers can exploit this vulnerability through manipulation of the argument fileId, leading to SQL injection. The exploit can be launched remotely, making it a significant threat. The vulnerability has been made public, increasing the risk of its exploitation. Despite early contact, the vendor has not responded to disclose a patch or mitigation measures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.