CVE-2024-14025: Video Station
An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands.
We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-14025?
The severity of CVE-2024-14025 is critical due to its potential to allow unauthorized code execution.
How do I fix CVE-2024-14025?
To fix CVE-2024-14025, update Video Station to the latest version beyond 5.8.2.
Who is affected by CVE-2024-14025?
CVE-2024-14025 affects Video Station users who have version 5.8.2 or earlier installed.
What types of attacks can CVE-2024-14025 facilitate?
CVE-2024-14025 can facilitate SQL injection attacks that lead to unauthorized command execution.
Is CVE-2024-14025 exploitable remotely?
CVE-2024-14025 is not exploitable remotely; it requires local network access and administrator account privileges.