CVE-2024-28099
Last modified
CVE-2024-28099 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.
Description
VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Keyence | Vt Studio | <= 8.32 |
References
- https://jvn.jp/en/vu/JVNVU92825069/Third Party Advisory
- https://www.keyence.com/vt_vulnerability240329_enVendor Advisory
- https://jvn.jp/en/vu/JVNVU92825069/Third Party Advisory
- https://www.keyence.com/vt_vulnerability240329_enVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-28099?
How severe is CVE-2024-28099?
How do I fix CVE-2024-28099?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-28093The TELNET service of AdTran NetVanta 3120 18.01.01.00.E dev…8.8
- CVE-2024-28094Chat functionality in Schoolbox application before version …8.8
- CVE-2024-28095News functionality in Schoolbox application before version …5.4
- CVE-2024-28096Class functionality in Schoolbox application before version…5.4
- CVE-2024-28097Calendar functionality in Schoolbox application before vers…5.4
- CVE-2024-28098The vulnerability allows authenticated users with only produ…5.4
- CVE-2024-2810A vulnerability has been found in Tenda AC15 15.03.05.18/15.…9.8
- CVE-2024-28100eLabFTW is an open source electronic lab notebook for resear…5.4
- CVE-2024-28101The Apollo Router is a graph router written in Rust to run a…7.5
- CVE-2024-28102JWCrypto implements JWK, JWS, and JWE specifications using p…6.8
- CVE-2024-28103Action Pack is a framework for handling and responding to we…9.8
- CVE-2024-28105phpMyFAQ is an open source FAQ web application for PHP 8.1+ …7.2
Are you affected by CVE-2024-28099?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST