CVE-2024-9441
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 2, 2024
Updated: Oct 4, 2024
CWE ID 78
Summary
CVE-2024-9441 is a newly disclosed vulnerability affecting the Linear eMerge e3-Series up to version 1.00-07. This issue permits an unauthenticated attacker to execute arbitrary OS commands by manipulating the login_id parameter during the forgot_password function call over HTTP. Successful exploitation could lead to serious security consequences, including unauthorized system access and data theft. It is crucial for users to update their systems to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.