Beveiligingsadvies

CVE-2024-10035

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-04 11:48:53
Laatst bijgewerkt 2026-06-02 06:55:00
Toegewezen door TR-CERT
CVSS-score 9.2
Status PUBLISHED

Beschrijving

Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command ('Command Injection'), Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in BG-TEK Informatics Security Technologies CoslatV3 allows Command Injection, Privilege Escalation. This issue affects CoslatV3: through 3.1069. NOTE: The vendor was contacted and it was learned that the product is not supported.