VDB

CVE-2024-41783

CVE-2024-41783 PUBLISHED CVSS 9.100000381469727 CRITICAL

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inject commands into the underlying operating system due to improper validation of a specified type of input.

EPSS 0.26% · 49.2th percentile

Risk Scores

CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.26%
49.2th percentile

Affected Products

VendorProductVersions
ibmsterling_secure_proxy6.0.0.0, 6.1.0.0, 6.2.0.0
IBMSterling Secure Proxy6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, 6.2.0.0

Exploit Intelligence

…and 1 more exploits

Timeline

  • Nov 15, 2024 CVE Published
  • Jan 19, 2025 PoC Published
  • Jan 19, 2025 PoC Published
  • Jan 19, 2025 PoC Published
  • Jan 19, 2025 PoC Published
  • Jan 19, 2025 PoC Published
  • Jan 19, 2025 PoC Published
  • Jan 19, 2025 PoC Published
  • Jan 19, 2025 PoC Published
  • Jan 20, 2025 EPSS Score
  • Jan 20, 2025 PoC Published
  • Jan 20, 2025 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›