CVE-2024-39755

Published Oct 3, 2024

Last updated 4 months ago

CVSS high 7.8

Overview

Description
A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0. A specially crafted PKG file can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Source
talos-cna@cisco.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

talos-cna@cisco.com
CWE-282

Social media

Hype score
Not currently trending

  1. [1day1line] CVE-2024-39755: Anka Build Privilege Escalation Vulnerability Due to TOCTOU The vulnerability enables privilege escalation through a TOCTOU attack by replacing the downloaded package with a malicious one before installation. https://t.co/RVcBkGXuoz

    @hackyboiz

    1750 Impressions

    5 Retweets

    19 Likes

    7 Bookmarks

    0 Replies

    0 Quotes

References