CVE-2024-23049
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2024-23049 is a critical vulnerability that affects the Symphony software version 3.6.3 and earlier. This vulnerability allows remote attackers to execute arbitrary code through the log4j component. The affected products include ZQKm4s, WPjf4J, ZQKm4t, ZQKm4u, ZQKm4v, ZQKm4p, ZQKm4q, ZQKm4r, bmM8c9, bmM8c_, bmM8c-, bnMc67, ZQKm48, ZQKm49, ZQKm4-, ZQKm4_, ZQKm44, ZQKm45, ZQKm46, ZQKm47, ZQKm40, ZQKm41, ZQKm42, ZQKm43, ZQKm4w, ZQkm4x,ZQMkmy,ZQMkmz,ZQMkm5E,ZQTteg,ZQMkm5A,ZQMkm5B,ZQMkm5C andZQMkm5D. The vulnerability has a base severity rating of critical with a CVSS base score of 9.8 out of 10. It poses a high danger to organizations as it can be exploited remotely without requiring any privileges or user interaction. The integrity and confidentiality impacts are both high. To remediate this vulnerability, it is recommended to update Symphony software to a version beyond 3.6.3 that includes the necessary security patches. Note: This summary is based on the provided information and does not reflect any additional analysis or research beyond what is given in the source text.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions