PT-2024-29296 · Apache · Apache Hertzbeat
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apache HertzBeat versions prior to 1.6.1
Description
This issue is related to the deserialization of untrusted data, which can only be exploited by authorized attackers. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations
For Apache HertzBeat versions prior to 1.6.1, users are recommended to upgrade to version 1.6.1, which fixes the issue.
Exploit
Fix
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Hertzbeat