critical9.1
CVE-2024-24722
An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevated privileges via t…
Impact
An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevated privileges via the 12d Synergy Server and/or 12d Synergy File Replication Server executable service path. This is fixed in 4.3.10.192, 5.1.5.221, and 5.1.6.235.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 12dsynergy | 12dsynergy | before 4.3.10.192 from 5.1.1.58 before 5.1.5.221 from 5.1.6.210 before 5.1.6.235 |
| 12dsynergy | File Replication Server | before 4.3.10.192 from 5.1.1.58 before 5.1.5.221 from 5.1.6.210 before 5.1.6.235 |
Weakness classification
References
- NVD record
- CVE.org record
- https://files.12dsynergy.com/downloads/download.aspx
- https://help.12dsynergy.com/v1/docs/cve-2024-24722
- https://www.12dsynergy.com/security-statement/
- https://files.12dsynergy.com/downloads/download.aspx
- https://help.12dsynergy.com/v1/docs/cve-2024-24722
- https://www.12dsynergy.com/security-statement/