We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-24122



Assignermitre
Reserved2024-01-25
Published2024-10-02
Updated2024-10-02

Description

A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special file name, which can be used to decompress the project file into the system startup folder, restart the system, and automatically execute the constructed attack script.

References

https://github.com/zty007666/Shenzhen-Yitu-Software-Yitu-Project-Management-Software/tree/0215da8db607824bc9523ce7532f8fc53ba1b40a/Remote%20Code%20Execution%20Vulnerability_02

https://gist.github.com/zty-1995/effed155177edd7b22fdf2c082e32984

cve.org CVE-2024-24122

nvd.nist.gov CVE-2024-24122

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.