Vulnerability Description
ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Teamt5 | Threatsonar Anti-Ransomware | < 3.5.0 |
Related Weaknesses (CWE)
References
- https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.htmlThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-7998-d76dd-1.htmlThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-US Government Resource
FAQ
What is CVE-2024-7694?
CVE-2024-7694 is a vulnerability with a CVSS score of 7.2 (HIGH). ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, wh...
How severe is CVE-2024-7694?
CVE-2024-7694 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-7694?
Check the references section above for vendor advisories and patch information. Affected products include: Teamt5 Threatsonar Anti-Ransomware.