SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityDeferred

CVE-2024-25103

This vulnerability exists in AppSamvid software due to the usage of vulnerable and outdated components.

MEDIUM 6.3EPSS 0.18%

Does this matter?

Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.

Description

This vulnerability exists in AppSamvid software due to the usage of vulnerable and outdated components. An attacker with local administrative privileges could exploit this by placing malicious DLLs on the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on the targeted system.

CVSS 3.1
6.3 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
EPSS
0.18% probability · 7th percentile
CISA KEV
Not listed
Weakness
CWE-426
Source
vdisclose@cert-in.org.in

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.