Vulnerability Description
An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access sensitive data or execute arbitrary commands via a crafted payload injected into the username field.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://gist.githubusercontent.com/Draoken/ab5465fc339df7a1e42281540b61f887/raw/
- https://medium.com/%40jkoreamo/centrestack-vulnerability-disclosure-d28dc8f21a56
- https://www.centrestack.com/p/gce_latest_release.html
FAQ
What is CVE-2024-37782?
CVE-2024-37782 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access sensitive data or execute arbitrary commands via a crafted payload injected into ...
How severe is CVE-2024-37782?
CVE-2024-37782 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-37782?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.