CVE-2024-47608 | THREATINT

Description

Logicytics is designed to harvest and collect data for forensic analysis. Logicytics has a basic vuln affecting compromised devices from shell injections. This vulnerability is fixed in 2.3.2.

PUBLISHED Reserved 2024-09-27 | Published 2024-10-01 | Updated 2024-10-01 | Assigner GitHub_M

MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

<= 2.3.1

affected

References

github.com/...cytics/security/advisories/GHSA-5wvr-vvqf-668m

www.codefactor.io/...b/definetlynotai/logicytics/issues/main

cve.org (CVE-2024-47608)

nvd.nist.gov (CVE-2024-47608)

Download JSON