We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-24122



Description

A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special file name, which can be used to decompress the project file into the system startup folder, restart the system, and automatically execute the constructed attack script.

Reserved 2024-01-25 | Published 2024-10-02 | Updated 2024-10-02 | Assigner mitre

References

github.com/...ba1b40a/Remote Code Execution Vulnerability_02

gist.github.com/zty-1995/effed155177edd7b22fdf2c082e32984

cve.org (CVE-2024-24122)

nvd.nist.gov (CVE-2024-24122)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-24122

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.