CVE-2024-34022
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Nov 13, 2024
Updated: Nov 15, 2024
CWE ID 284
Summary
CVE-2024-34022 is a vulnerability affecting Thunderbolt(TM) Share software prior to version 1.0.49.9. This issue involves improper access control, enabling an authenticated user to potentially escalate privileges through local access. Successful exploitation could allow the attacker to gain elevated system permissions, increasing the risk of data theft or unauthorized system modifications. Users are strongly advised to update their Thunderbolt(TM) Share software to the latest version to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.