CVE-2024-53676

Katalog CVE

CVSS 9.8 · Critical EPSS 56,3%

Kerentanan Files or Directories Accessible to External Parties pada hpe insight remote support. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.

Rincian

Terbit di NVD

27 November 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-552: Files or Directories Accessible to External Parties
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

56,3% peluang dieksploitasi; lebih tinggi dari 99,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us advisory vendor
• https://github.com/pwnfuzz/POCs/tree/main/CVE-2024-53676