CVE-2024-25552: Wiesemann & Theis: Multiple products prone to unquoted search path
A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25552?
CVE-2024-25552 has a high severity rating as it allows local attackers to gain administrative privileges.
How do I fix CVE-2024-25552?
To fix CVE-2024-25552, ensure that you do not allow untrusted users to place executable files in the affected product's path.
What products are affected by CVE-2024-25552?
CVE-2024-25552 affects Wut Com Port Redirector Legacy versions up to 3.93, Wut Com Port Redirector Plug & Play versions up to 4.42, and Wut OPC Server versions up to 4.88.
Can CVE-2024-25552 be exploited remotely?
CVE-2024-25552 cannot be exploited remotely as it requires local access to the affected systems.
Is there a patch available for CVE-2024-25552?
As of now, there is no specific patch released for CVE-2024-25552, but it is important to follow best practices to mitigate the risk.