HIGH🇵🇱 Wersja polska

CVE-2024-1654

CVSS 7.2v3.1pub. 2024-03-14upd. 2025-01-23

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Apple macOS

    OS
    Apple
    wszystkie wersje

  • Linux Kernel

    OS
    Linux
    wszystkie wersje

  • Microsoft Windows

    OS
    Microsoft
    wszystkie wersje

  • Papercut Mf

    APP
    Papercut
    23.0.1 – 23.0.7 (bez)< 20.1.1021.0.0 – 21.2.14 (bez)22.0.0 – 22.1.5 (bez)

  • Papercut Ng

    APP
    Papercut
    23.0.1 – 23.0.7 (bez)22.0.0 – 22.1.5 (bez)21.0.0 – 21.2.14 (bez)< 20.1.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-43300CRITICAL10.0⚠ KEVPL ✓ten sam produkt

Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu

CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP

CVE-2025-31200CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Apple — memory corruption (RCE) w przetwarzaniu strumieni audio