CVE-2024-13976: Commvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL Injection
A DLL injection vulnerability exists in Commvault for Windows 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. During the installation of maintenance updates, an attacker with local access may exploit uncontrolled search path or DLL loading behavior to execute arbitrary code with elevated privileges. The vulnerability has been resolved in versions 11.20.202, 11.28.124, 11.32.65, 11.34.37, and 11.36.15.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13976?
The severity of CVE-2024-13976 is classified as critical due to the potential for remote code execution.
How do I fix CVE-2024-13976?
To fix CVE-2024-13976, update your Commvault software to the latest version that addresses this vulnerability.
What versions of Commvault are affected by CVE-2024-13976?
CVE-2024-13976 affects Commvault versions 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0.
What type of attack vector is involved in CVE-2024-13976?
CVE-2024-13976 involves a DLL injection vulnerability that can be exploited through local access during maintenance updates.
Can CVE-2024-13976 lead to data breaches?
Yes, CVE-2024-13976 can potentially lead to data breaches if an attacker successfully executes arbitrary code on the affected system.