csirt@kutim:~/threat-intel/cve/CVE-2024-24916

Katalog CVE

CVSS 7.8 · High EPSS 2,7%

Kerentanan Uncontrolled Search Path Element pada checkpoint smartconsole. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).

Rincian

Terbit di NVD
19 Juni 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-427: Uncontrolled Search Path Element
EPSS (30 hari)
2,7% peluang dieksploitasi; lebih tinggi dari 85,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
checkpoint smartconsole Versi r81.10 build400
checkpoint smartconsole Versi r81.10 build402
checkpoint smartconsole Versi r81.10 build404
checkpoint smartconsole Versi r81.10 build406
checkpoint smartconsole Versi r81.10 build407
checkpoint smartconsole Versi r81.10 build409
checkpoint smartconsole Versi r81.10 build410
checkpoint smartconsole Versi r81.10 build412
checkpoint smartconsole Versi r81.10 build413
checkpoint smartconsole Versi r81.10 build414
checkpoint smartconsole Versi r81.10 build416
checkpoint smartconsole Versi r81.10 build417
checkpoint smartconsole Versi r81.10 build418
checkpoint smartconsole Versi r81.10 build420
checkpoint smartconsole Versi r81.10 build423
checkpoint smartconsole Versi r81.10 build424
checkpoint smartconsole Versi r81.10 build425
checkpoint smartconsole Versi r81.20 build640
checkpoint smartconsole Versi r81.20 build641
checkpoint smartconsole Versi r81.20 build645
checkpoint smartconsole Versi r81.20 build646
checkpoint smartconsole Versi r81.20 build649
checkpoint smartconsole Versi r81.20 build651
checkpoint smartconsole Versi r81.20 build653
checkpoint smartconsole Versi r81.20 build654
checkpoint smartconsole Versi r81.20 build655

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.