1. Home
  2. CVE Database
  3. CVE-2024-1683
HIGH · 7.3

CVE-2024-1683

A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configu...

Vulnerability Description

A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
TenableIdentity Exposure< 3.59.4

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2024-1683?

CVE-2024-1683 is a vulnerability with a CVSS score of 7.3 (HIGH). A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configu...

How severe is CVE-2024-1683?

CVE-2024-1683 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-1683?

Check the references section above for vendor advisories and patch information. Affected products include: Tenable Identity Exposure.