← Back

CVE-2024-7694

nvd nist
Published: Aug 12, 2024Modified: Feb 18, 2026CISA KEV

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: twcert@cert.org.tw (Secondary)

Description

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

Affected (1)

Teamt5
1 product
Threatsonar Anti Ransomware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Threatsonar Anti Ransomware
Before 3.5.0

Related CWEs

CWE-434
Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (3)

Source: twcert@cert.org.tw
Third Party Advisory
Source: twcert@cert.org.tw
Third Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.