← Volver a CVEs

CVE-2024-40895

MEDIUM

6.4

Descripcion

FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the executable file path is set to a batch file (.bat) or command file (.cmd) extension.

Detalles CVE

Puntuacion CVSS v3.16.4

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L

Vector de ataqueNETWORK

ComplejidadHIGH

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado7/30/2024

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-78

Referencias

https://jvn.jp/en/jp/JVN26734798/(vultures@jpcert.or.jp)

https://www.ffri.jp/assets/files/other_docs/20240729.pdf(vultures@jpcert.or.jp)

https://www.skyseaclientview.net/news/240729_01/(vultures@jpcert.or.jp)

https://www.support.nec.co.jp/View.aspx?id=3140109694(vultures@jpcert.or.jp)

https://jvn.jp/en/jp/JVN26734798/(af854a3a-2127-422b-91ae-364da2661108)

https://www.ffri.jp/assets/files/other_docs/20240729.pdf(af854a3a-2127-422b-91ae-364da2661108)

https://www.skyseaclientview.net/news/240729_01/(af854a3a-2127-422b-91ae-364da2661108)

https://www.support.nec.co.jp/View.aspx?id=3140109694(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.