by Kastro
Paper/Archive/CVE-2024-24722

CVE-2024-24722

12dsynergy 12d_synergy_server — An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain ele…

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 49.2.492 × 209.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevated privileges via the 12d Synergy Server and/or 12d Synergy File Replication Server executable service path. This is fixed in 4.3.10.192, 5.1.5.221, and 5.1.6.235.

Affected

ProductAffectedFixed inSource
n/an/a–CNA
12d_synergy_server< 4.3.10.1924.3.10.192CISA-ADP
12d_synergy_server< 5.1.5.2215.1.5.221CISA-ADP
12d_synergy_server< 5.1.6.2355.1.6.235CISA-ADP
12d_synergy_file_replication_server< 4.3.10.1924.3.10.192CISA-ADP
12d_synergy_file_replication_server< 5.1.5.2215.1.5.221CISA-ADP
12d_synergy_file_replication_server< 5.1.6.2355.1.6.235CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

ref12dsynergy.com/security-statementreffiles.12dsynergy.com/downloads/download.aspxrefhelp.12dsynergy.com/v1/docs/cve-2024-24722