NetSight
high7.2

CVE-2024-1654

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution.

Impact

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this.

Affected products

VendorProductAffected versions
PapercutPapercut Mf
before 20.1.10
from 21.0.0 before 21.2.14
from 22.0.0 before 22.1.5
from 23.0.1 before 23.0.7
PapercutPapercut Ng
before 20.1.10
from 21.0.0 before 21.2.14
from 22.0.0 before 22.1.5
from 23.0.1 before 23.0.7

Weakness classification

References