CVE-2024-57394

Summary

CVE-2024-57394 is a newly disclosed vulnerability in Qi-ANXIN Tianqing Endpoint Security Management System v10.0. The issue lies within the quarantine-restore function, which enables users to restore a file to an arbitrary file path. Malicious actors can exploit this flaw by restoring a malicious DLL to a system path, setting the stage for privilege escalation. Attackers can take advantage of Windows DLL hijacking vulnerabilities to gain elevated access and potentially execute unauthorized commands. This vulnerability poses a significant risk to affected systems and requires immediate attention and patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.