VDB
BDU%3A2025-01366
BDU%3A2025-01366
PUBLISHED
CVSS 9.899999618530273 CRITICAL
Уязвимость функции «as_wazuh_object» системы обнаружения и предотвращения вторжений Wazuh, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 3.1
9.899999618530273
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wazuh | wazuh | >= 4.4.0, < 4.9.1 |
| Wazuh, Inc | Wazuh |
Timeline
- Feb 10, 2025 PoC Published
- Feb 10, 2025 PoC Published
- Feb 10, 2025 PoC Published
- Feb 10, 2025 PoC Published
- Feb 11, 2025 PoC Published
- Feb 11, 2025 PoC Published
- Feb 12, 2025 CVE Published
- Feb 12, 2025 PoC Published
- Feb 12, 2025 PoC Published
- Feb 12, 2025 PoC Published
- Feb 12, 2025 PoC Published
- Feb 13, 2025 PoC Published
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24016 url
- https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh url
- https://www.securitycode.ru/company/blog/daydzhest-laboratorii-analiza-setevykh-ugroz-kod-bezopasnosti-za-mart-2025/ url
- https://github.com/wazuh/wazuh/releases advisory