CVE-2024-20143
CVSS 3.1 Score 6.6 of 10 (medium)
Details
Published Jan 6, 2025
CWE ID 787
Summary
CVE-2024-20143 is a vulnerability affecting V6 DA software. It involves a missing bounds check leading to a possible out-of-bounds write. If exploited, an attacker with physical access can escalate privileges locally, bypassing the need for additional execution privileges. User interaction is necessary for successful exploitation. The patch for this issue is identified as ALPS09167056, and it is also referred to as MSV-2069.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.