CVE-2024-47113
Last modified
CVE-2024-47113 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document.. EPSS estimates a 0.57% chance of exploitation in the next 30 days.
Description
IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Voice Gateway | 1.0.2 |
| Ibm | Voice Gateway | 1.0.2.4 |
| Ibm | Voice Gateway | 1.0.3 |
| Ibm | Voice Gateway | 1.0.4 |
| Ibm | Voice Gateway | 1.0.5 |
| Ibm | Voice Gateway | 1.0.6 |
| Ibm | Voice Gateway | 1.0.7 |
| Ibm | Voice Gateway | 1.0.7.1 |
| Ibm | Voice Gateway | 1.0.8 |
References
- https://www.ibm.com/support/pages/node/7175791Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-47113?
How severe is CVE-2024-47113?
How do I fix CVE-2024-47113?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-47103IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.…5.4
- CVE-2024-47104IBM i 7.4 and 7.5 is vulnerable to an authenticated user gai…6.8
- CVE-2024-47106IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could…7.5
- CVE-2024-47107IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scrip…5.4
- CVE-2024-47109IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.…5.3
- CVE-2024-4711The WordPress Infinite Scroll – Ajax Load More plugin for Wo…5.4
- CVE-2024-47115IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local us…7.8
- CVE-2024-47116IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.…5.4
- CVE-2024-47117IBM Carbon Design System (Carbon Charts 0.4.0 through 1.13.1…5.4
- CVE-2024-47118IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.…7.5
- CVE-2024-47119IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.…7.5
- CVE-2024-4712An arbitrary file creation vulnerability exists in PaperCut …7.8
Are you affected by CVE-2024-47113?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST