Vulnerability Description
Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command ('Command Injection'), Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in BG-TEK Informatics Security Technologies CoslatV3 allows Command Injection, Privilege Escalation.This issue affects CoslatV3: through 3.1069. NOTE: The vendor was contacted and it was learned that the product is not supported.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bg-Tek | Coslat | >= 3.0, <= 3.1069 |
Related Weaknesses (CWE)
References
- https://www.usom.gov.tr/bildirim/tr-24-1814Third Party Advisory
FAQ
What is CVE-2024-10035?
CVE-2024-10035 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command ('Command Injection'), Improper Neutralization of Special Elements used in an O...
How severe is CVE-2024-10035?
CVE-2024-10035 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-10035?
Check the references section above for vendor advisories and patch information. Affected products include: Bg-Tek Coslat.