CVE-2024-42017
CVSS 3.1 Score 10 of 10 (high)
Details
Published Sep 30, 2024
Updated: Oct 29, 2024
CWE ID 306
Summary
CVE-2024-42017 is a newly disclosed vulnerability affecting Atos Eviden iCare versions 2.7.1 through 2.7.11. This issue arises due to the application's exposure of a local web interface. In unfavorable circumstances, if the application is accessible remotely, an attacker can exploit this vulnerability to execute arbitrary commands with system privilege on the vulnerable endpoint, bypassing the need for authentication.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.