CVE-2024-51364
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 21, 2024
Updated: Nov 27, 2024
CWE ID 434
Summary
CVE-2024-51364 is a newly disclosed vulnerability affecting ModbusMechanic version 3.0. This issue permits attackers to upload maliciously crafted .xml files, exploiting an arbitrary file upload flaw. Successful attacks could result in the execution of arbitrary code, potentially leading to serious security repercussions. Users are strongly advised to upgrade to a patched version or implement alternative security measures to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.