Home

Description

External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition.

PUBLISHED Reserved 2024-04-26 | Published 2024-12-19 | Updated 2024-12-19 | Assigner Mitsubishi




HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-73 External Control of File Name or Path

Product status

Default status
unaffected

versions 1.00 and later
affected

Default status
unaffected

versions 1.00 and later
affected

References

www.edgecross.org/...ta-download/pdf/ECD-TE10-0003-01-EN.pdf vendor-advisory

jvn.jp/vu/JVNVU92857077/index.html government-resource

cve.org (CVE-2024-4230)

nvd.nist.gov (CVE-2024-4230)

Download JSON