CVE-2024-25103
Last modified
CVE-2024-25103 is a medium-severity vulnerability rated 6.3/10 on the CVSS scale. This vulnerability exists in AppSamvid software due to the usage of vulnerable and outdated components. An attacker with local administrative privileges could exploit this by placing malicious DLLs on the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on the targeted system.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.
Description
This vulnerability exists in AppSamvid software due to the usage of vulnerable and outdated components. An attacker with local administrative privileges could exploit this by placing malicious DLLs on the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on the targeted system.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-25103?
How severe is CVE-2024-25103?
How do I fix CVE-2024-25103?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-25097Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2024-25098Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2024-25099Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2024-25100Deserialization of Untrusted Data vulnerability in WP Swings…9.8
- CVE-2024-25101Improper Neutralization of Input During Web Page Generation …4.8
- CVE-2024-25102This vulnerability exists in AppSamvid software due to the u…7.8
- CVE-2024-25106OpenObserve is a observability platform built specifically f…6.5
- CVE-2024-25107WikiDiscover is an extension designed for use with a CreateW…6.1
- CVE-2024-25108Pixelfed is an open source photo sharing platform. When proc…8.8
- CVE-2024-25109ManageWiki is a MediaWiki extension allowing users to manage…5.4
- CVE-2024-2511Issue summary: Some non-default TLS server configurations ca…5.9
- CVE-2024-25110The UAMQP is a general purpose C library for AMQP 1.0. Durin…8.1
Are you affected by CVE-2024-25103?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST