CVE-2024-7901
Last modified
CVE-2024-7901 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm#/alarms/Scada of the component Message Handler. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm#/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: A fix is planned for the upcoming release at the end of September 2024.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Scada-Lts | Scada-Lts | 2.7.8 |
References
- https://vuldb.com/?ctiid.274909Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.274909Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.387606Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-7901?
How severe is CVE-2024-7901?
How do I fix CVE-2024-7901?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-7895The Beaver Builder – WordPress Page Builder plugin for WordP…5.4
- CVE-2024-7896A vulnerability was found in Tosei Online Store Management S…8.8
- CVE-2024-7897A vulnerability classified as critical has been found in Tos…8.8
- CVE-2024-7898A vulnerability classified as critical was found in Tosei On…9.8
- CVE-2024-7899A vulnerability, which was classified as critical, has been …7.2
- CVE-2024-7900A vulnerability, which was classified as problematic, was fo…4.8
- CVE-2024-7902A vulnerability was found in pkp ojs up to 3.4.0-6 and class…6.1
- CVE-2024-7903A vulnerability was found in DedeBIZ 6.3.0. It has been decl…8.8
- CVE-2024-7904A vulnerability was found in DedeBIZ 6.3.0. It has been rate…8.8
- CVE-2024-7905A vulnerability classified as critical has been found in Ded…7.2
- CVE-2024-7906A vulnerability classified as critical was found in DedeBIZ …8.8
- CVE-2024-7907A vulnerability, which was classified as critical, has been …9.8
Are you affected by CVE-2024-7901?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST