CVE-2024-3460

Katalog CVE

CVSS 7.0 · High EPSS 0,27%

Kerentanan Improper Protection of Alternate Path pada kioware. Skor CVSS 3.1 7.0 (High) menurut NVD.

Deskripsi (NVD)

In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing a short time window before the forced automatic logout occurs. Then, by using some built-in function of these applications, one may launch any other programs.  In order to exploit this vulnerability external applications must be left running when the KioWare software is launched. Additionally, an attacker must know the PIN set for this Kioware instance and also slow down the application with some specific task which extends the usable time window.

Rincian

Terbit di NVD

14 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-424: Improper Protection of Alternate Path

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 18,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert.pl/en/posts/2024/04/CVE-2024-3459 broken link · advisory pihak ketiga
• https://cert.pl/posts/2024/04/CVE-2024-3459 broken link · advisory pihak ketiga
• https://www.kioware.com/ product