CVE-2024-10497

Summary

CVE-2024-10497 is a newly disclosed vulnerability classified as an Authorization Bypass through User-Controlled Key (CWE-639). This issue allows unauthorized attackers to modify data beyond their defined privileges by sending crafted HTTPS requests to the device. Successful exploitation could result in Elevation of Privileges, enabling the attacker to gain unauthorized access or control over the affected system. The vulnerability poses a significant risk to security, as it bypasses the intended access controls, making it essential for organizations to apply the necessary patches as soon as they become available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.