CVE-2024-28171

CVSS 3.1 Score 8.1 of 10 (high)

Details

Published Mar 21, 2024
Updated: Mar 22, 2024
CWE ID 22

Summary

The vulnerability with the CVE ID CVE-2024-28171 is a path traversal attack that can result in writing outside of the intended directory. This vulnerability affects the product ohOF2c. If a file name is specified that already exists on the file system, the original file will be overwritten. The potential danger this poses to an organization is high, with a base severity rating of HIGH and an impact score of 5.2. The exploitability score is 2.8, indicating a moderate level of difficulty for attackers to exploit this vulnerability. The attack vector is through the network and privileges required are low, with no user interaction needed. It has an availability impact of HIGH and integrity impact of HIGH but does not affect confidentiality. To remediate this vulnerability, organizations should implement proper input validation and ensure that file operations are restricted to the intended directories.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-28171 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options