PT-2024-35369
CVE-2024-52548
·
تاريخ النشر
2024-12-03
·
تاريخ التحديث
2024-12-04
الوصف من
CVSS 3.1
6.7
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Lorex 2K Indoor Wi-Fi Security Camera versions prior to 2.800.0000000.8.R.20241111
Description
An attacker who can execute arbitrary Operating Systems commands can bypass code signing enforcements in the kernel and execute arbitrary native code. The issue allows manipulation that leads to insufficient data authenticity verification.
Recommendations
For versions prior to 2.800.0000000.8.R.20241111, upgrade to version 2.800.0000000.8.R.20241111 or later to resolve the issue. As a temporary workaround, consider restricting access to the kernel to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾