CVE-2024-46540
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Published Sep 30, 2024
Updated: Oct 4, 2024
CWE ID 266
Summary
CVE-2024-46540 is a remote code execution (RCE) vulnerability affecting the Emlog Pro software before version 2.3.15. Attackers can exploit this issue in the /admin/store.php component to download remote files and execute self-extract functions. By uploading webshells, they can gain system privileges on the target server. This vulnerability poses a significant risk and requires immediate attention for Emlog Pro users to apply the necessary patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Pro-