CVE-2024-20130

Summary

CVE-2024-20130 is a vulnerability affecting the power software that allows for out-of-bounds writing due to a missing bounds check. This issue can result in local privilege escalation, granting System execution privileges to an attacker. Unlike some vulnerabilities, user interaction is not necessary for exploitation. A patch with ID ALPS09193374 has been released to address this issue, designated as MSV-1982.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.