CVE-2024-6051
Last modified
CVE-2024-6051 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13.
Metrics
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Clear
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-6051?
How severe is CVE-2024-6051?
How do I fix CVE-2024-6051?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-6045Certain models of D-Link wireless routers contain an undiscl…8.8
- CVE-2024-6046Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2024-6047Certain EOL GeoVision devices fail to properly filter user i…9.8
- CVE-2024-6048Openfind's MailGates and MailAudit fail to properly filter u…9.8
- CVE-2024-6049The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is a…7.5
- CVE-2024-6050Improper Neutralization of Input During Web Page Generation …6.1
- CVE-2024-6052Stored XSS in Checkmk before versions 2.3.0p8, 2.2.0p29, 2.1…5.4
- CVE-2024-6053Improper access control in the clipboard synchronization fea…4.3
- CVE-2024-6054The Auto Featured Image plugin for WordPress is vulnerable t…8.8
- CVE-2024-6055Improper removal of sensitive information in data source exp…4.7
- CVE-2024-6056A vulnerability was found in nasirkhan Laravel Starter up to…5.3
- CVE-2024-6057Improper authentication in the vault password feature in Dev…9.8
Are you affected by CVE-2024-6051?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST