CVE-2024-6995

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Aug 6, 2024
Updated: Aug 7, 2024
CWE ID 358

Summary

CVE-2024-34604 represents a vulnerability in LedCoverService, where improper access controls existed before the Aug-2024 Release 1 of SMR. This issue allowed local attackers to bypass security restrictions and initiate services from the background, potentially leading to unauthorized system modifications or access to sensitive information. The vulnerability could have significant implications for system security and integrity, emphasizing the importance of prompt patching and access control management.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share