CVE-2024-4230

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-4230
External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://jvn.jp/vu/JVNVU92857077/index.html
https://www.edgecross.org/client_info/EDGECROSS/view/userweb/ext/en/data-download/pdf/ECD-TE10-0003-01-EN.pdf
Configurations

No configuration.

History

15 Apr 2026, 00:35

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de control externo de nombre de archivo o ruta en Edgecross Basic Software para Windows versiones 1.00 y posteriores y Edgecross Basic Software para desarrolladores versiones 1.00 y posteriores permite que un atacante local malintencionado ejecute un código malicioso arbitrario, lo que resulta en la divulgación, manipulación y eliminación de información, o una condición de denegación de servicio (DoS).

19 Dec 2024, 08:17

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-19 08:17

Updated : 2026-04-15 00:35

NVD link : CVE-2024-4230

Mitre link : CVE-2024-4230

CVE.ORG link : CVE-2024-4230

JSON object : View

Products Affected

No product.

CWE
CWE-73

External Control of File Name or Path