VDB
BDU%3A2025-01366
BDU%3A2025-01366
PUBLISHED
CVSS 8.699999809265137 HIGH
Уязвимость функции «as_wazuh_object» системы обнаружения и предотвращения вторжений Wazuh, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
8.699999809265137
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wazuh | wazuh | >= 4.4.0, < 4.9.1 |
| Wazuh, Inc | Wazuh |
Timeline
- Feb 10, 2025 PoC Published
- Feb 10, 2025 PoC Published
- Feb 10, 2025 PoC Published
- Feb 10, 2025 PoC Published
- Feb 11, 2025 PoC Published
- Feb 11, 2025 PoC Published
- Feb 12, 2025 CVE Published
- Feb 12, 2025 PoC Published
- Feb 12, 2025 PoC Published
- Feb 12, 2025 PoC Published
- Feb 12, 2025 PoC Published
- Feb 13, 2025 PoC Published
References
- https://github.com/wazuh/wazuh/releases url
- https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh url
- https://www.securitycode.ru/company/blog/daydzhest-laboratorii-analiza-setevykh-ugroz-kod-bezopasnosti-za-mart-2025/ url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24016 url