by Kastro
Paper/Archive/CVE-2024-42017

CVE-2024-42017

mitre — An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11.

EPSS 0.5%CVSS 10.0
critical.is priorityof 100
39
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 45.9.459 × 209.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an attacker to execute arbitrary commands with system privilege on the endpoint hosting the application, without any authentication.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

mitre (CNA)10.0CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refeviden.comrefsupport.bull.com/ols/product/security/psirt/security-bulletins/multiple-critical-vulnerabilities-in-icare-psirt-625-tlp-clear-version-0-7-cve-2024-42017/view