VulnerabilityDeferred

CVE-2024-6051

Cross Application Scripting vulnerability in Vercom S.A.

MEDIUM 4.3EPSS 0.16%

Does this matter?

Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.

Description

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13.

CVSS 4.0: 4.3 MEDIUMCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.16% probability · 6th percentile
CISA KEV: Not listed
Weakness: CWE-926
Source: cvd@cert.pl

References

https://cert.pl/en/posts/2024/09/CVE-2024-6051/
https://cert.pl/posts/2024/09/CVE-2024-6051/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.