CVE-2024-11948: GFI Archiver Telerik Web UI Remote Code Execution Vulnerability
GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Telerik Web UI. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-24041.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11948?
CVE-2024-11948 has been classified as a critical vulnerability due to its ability to allow remote code execution without authentication.
How do I fix CVE-2024-11948?
To mitigate CVE-2024-11948, ensure that you update to the latest version of GFI Archiver that addresses this vulnerability.
What is the impact of CVE-2024-11948 on GFI Archiver installations?
CVE-2024-11948 allows attackers to execute arbitrary code on affected GFI Archiver installations, posing significant security risks.
Is authentication required to exploit CVE-2024-11948?
No, CVE-2024-11948 can be exploited without any authentication, making it particularly dangerous.
Which versions of GFI Archiver are affected by CVE-2024-11948?
CVE-2024-11948 affects all versions of GFI Archiver prior to version 15.7.