PT-2024-18773
CVE-2024-20862
·
Published
2024-05-06
·
Updated
2025-02-10
Description by
CVSS 3.1
6.7
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SveService versions prior to SMR May-2024 Release 1
Description
The issue is an out-of-bounds write in SveService, allowing local privileged attackers to execute arbitrary code.
Recommendations
For versions prior to SMR May-2024 Release 1, update to SMR May-2024 Release 1 or later to resolve the issue.
As a temporary workaround, consider restricting access to the SveService to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾