CVE-2024-9536

CVSS 3.1 Score 6.3 of 10 (medium)

Attack Complexity low
Confidentiality low
Integrity low
Availability low
Privileges Required low
Scope unchanged

Details

Published Oct 5, 2024
Updated: Oct 7, 2024
CWE ID 89

Summary

CVE-2024-9536 is a newly disclosed critical vulnerability affecting ESAFENET CDG V5. This issue lies in an unknown functionality of the /MultiServerBackService?path=1 file. Attackers can exploit this vulnerability through manipulation of the argument fileId, leading to SQL injection. The exploit can be launched remotely, making it a significant threat. The vulnerability has been made public, increasing the risk of its exploitation. Despite early contact, the vendor has not responded to disclose a patch or mitigation measures.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share