CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-08-22
Versa Director GUI Dangerous File Upload Vulnerability Leading to Remote Code Execution (CVE-2024-39717)
[Affected Scope] Authenticated Versa Director systems with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges
[Impact] Authenticated attackers can exploit the 'Change Favicon' feature to upload malicious files masquerading as .png images, leading to arbitrary code execution on the host system
[Mitigation] Apply the official security patches from Versa Networks immediately and restrict access to the management GUI to trusted IP addresses only