CVE-2024-10035 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in BG-TEK Informatics Security Technologies CoslatV3 allows Command Injection.This issue affects CoslatV3: through 3.1069. NOTE: The vendor was contacted and it was learned that the product is not supported.

Reserved 2024-10-16 | Published 2024-11-04 | Updated 2024-11-04 | Assigner TR-CERT

CRITICAL: 9.2CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N

Problem types

CWE-94 Improper Control of Generation of Code ('Code Injection')

Product status

Default status

affected

Any version

affected

Credits

Efe OZEL finder

Cemil Sefa OZCAN analyst

Omer YILMAZ analyst

Fordefence Inc. sponsor

References

www.usom.gov.tr/bildirim/tr-24-1814

cve.org (CVE-2024-10035)

nvd.nist.gov (CVE-2024-10035)

Download JSON

https://cve.threatint.com/CVE/CVE-2024-10035

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.