Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-31771

Published: 14/05/2024 Updated: 14/05/2024

Vulnerability Summary

Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local malicious user to escalate privileges via a crafted file

Github Repositories

https://github.com/restdone/CVE-2024-31771

CVE-2024-31771 TotalAV Arbitrary File Write TotalAV version 60x totalav_6_0_1028-latestmp4 Timeline: 13th Feb, 2024 : Discovered 60740 vulnerable and reported to TotalAV 15th Feb, 2024: TotalAV confirmed and reproduced the issue 19th Feb, 2024: TotalAV was liaising with another vendor That vendor advised that they were working on it

References

https://github.com/restdone/CVE-2024-31771https://nvd.nist.govhttps://github.com/restdone/CVE-2024-31771
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33228CVE-2024-20361log injectionbypassCVE-2024-4985CVE-2024-35223CVE-2024-29849CVE-2024-31893IMAP
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook