CVE-2024-4230 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition.

Reserved 2024-04-26 | Published 2024-12-19 | Updated 2024-12-19 | Assigner Mitsubishi

HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-73 External Control of File Name or Path

Product status

Default status

unaffected

versions 1.00 and later

affected

Default status

unaffected

versions 1.00 and later

affected

References

www.edgecross.org/...ta-download/pdf/ECD-TE10-0003-01-EN.pdf vendor-advisory

jvn.jp/vu/JVNVU92857077/index.html government-resource

cve.org (CVE-2024-4230)

nvd.nist.gov (CVE-2024-4230)

Download JSON

https://cve.threatint.com/CVE/CVE-2024-4230

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.