CRITICAL · 9.8

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.

Vulnerability Description

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
EscanavEscan Management Console14.0.1400.2281

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-42919?

CVE-2024-42919 is a vulnerability with a CVSS score of 9.8 (CRITICAL). eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.

How severe is CVE-2024-42919?

CVE-2024-42919 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2024-42919?

Check the references section above for vendor advisories and patch information. Affected products include: Escanav Escan Management Console.