by Kastro
Paper/Archive/CVE-2024-9924

CVE-2024-9924

Hgiga OAKlouds — Hgiga OAKlouds - Arbitrary File Read And Delete

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 57.5.575 × 2011.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk. Unauthenticated remote attackers still can download arbitrary system files, which may be deleted subsequently .

Affected

ProductAffectedFixed inSource
OAKlouds< 11621162CNA
oaklouds< 11621162CISA-ADP

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeuptwcert.org.tw/tw/cp-132-8130-89bb1-1.htmlwriteuptwcert.org.tw/en/cp-139-8131-0b5e1-2.html