CVE-2024-1618
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2024-1618 is a vulnerability in Faronics Deep Freeze Server Standard, affecting versions 8.30.020.4627 and earlier. The vulnerability resides in the DFServ.exe file and allows an attacker with local user privileges to replace the legitimate executable with a malicious file of the same name in a higher priority directory. When the service starts, it executes the malicious file instead of the legitimate executable, enabling the attacker to execute arbitrary code, gain unauthorized access, or disrupt the service. The risk score is 25, with a high base severity of 7.8, indicating a significant threat to confidentiality and integrity of affected systems. Remediation measures are not provided in the given information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions