CVE-2024-57964

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published Feb 18, 2025
CWE ID 427

Summary

CVE-2024-57964 is a vulnerability affecting the HVAC Energy Saving Program, where the insecure loading of Dynamic Link Libraries (DLLs) has been identified. This weakness could enable local attackers to gain unauthorized access, potentially disclosing sensitive information or executing arbitrary code on impacted systems. The HVAC Energy Saving Program is the targeted software in this security incident.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share