1. Home
  2. CVE Database
  3. CVE-2024-41309
HIGH · 7.8

CVE-2024-41309

An issue in the Hardware info module of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and gain root-level privileges on the underlying system.

Vulnerability Description

An issue in the Hardware info module of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and gain root-level privileges on the underlying system.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
EnjayworldEnjay Crm1.0

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2024-41309?

CVE-2024-41309 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue in the Hardware info module of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and gain root-level privileges on the underlying system.

How severe is CVE-2024-41309?

CVE-2024-41309 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-41309?

Check the references section above for vendor advisories and patch information. Affected products include: Enjayworld Enjay Crm.