CVE-2024-57394

Description

The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path. Attackers can write malicious DLL to system path and perform privilege escalation by leveraging Windows DLL hijacking vulnerabilities.

PUBLISHED Reserved 2025-01-09 | Published 2025-04-21 | Updated 2025-05-12 | Assigner mitre

References

en.qianxin.com/product/detail/165

github.com/cwjchoi01/CVE-2024-57394

cve.org (CVE-2024-57394)

nvd.nist.gov (CVE-2024-57394)

Download JSON