CVE-2024-55457

MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

3.06% chance of exploitation in the next 30 days, 87th percentile

Nuclei

high · CWE-22

Published

2025-02-20

Proof-of-concept exploits (1)

• h13nh04ng/CVE-2024-55457-PoC0★ · 2025-01-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55457.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-55456
• CVE-2024-55466
• CVE-2024-55452
• CVE-2024-55488
• CVE-2024-55451
• CVE-2024-55496