CVE-2024-2097

HIGH

7.5

Description

An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the arbitrary code on the same system where SCMArchivedEventViewerTool is installed in the case of SCM Tools.

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteHIGH

Privileges requisLOW

Interaction utilisateurNONE

Publie3/27/2024

Derniere modification9/30/2025

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-94

References

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189&languageCode=en&Preview=true(cybersecurity@hitachienergy.com)

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189&languageCode=en&Preview=true(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.