CVE-2024-22026

MEDIUM 6.7EPSS 1.1%

A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance.

CVSS v3.1: 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v3.0: 6.7 MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.10% chance of exploitation in the next 30 days, 63th percentile
Published: 2024-05-22
Updated: 2025-03-13

Proof-of-concept exploits (1)

securekomodo/CVE-2024-2202615★ · 2024-05-15

References

Related