CVE-2024-54229

Monday, December 16, 2024

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Incorrect Privilege Assignment vulnerability in straightvisions GmbH SV100 Companion sv100-companion allows Privilege Escalation.This issue affects SV100 Companion: from n/a through <= 2.0.02.

Affected Software

Vendor	Product	Version Range	Status
straightvisions GmbH	SV100 Companion	`0 <= 2.0.02`	affected

Weaknesses

CWE-266: Incorrect Privilege Assignment

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: poc
- Automatable: yes
- Technical Impact: total

References

https://patchstack.com/database/Wordpress/Plugin/sv100-companion/vulnerability/wordpress-sv100-companion-plugin-2-0-02-privilege-escalation-vulnerability?_s_id=cve

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.

←Previous
Next→