CVE-2024-27776: MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published Jun 2, 2024
·Updated
MileSight DeviceHub -
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE
Affected Software
3 affected components
Milesight DeviceHub
All of the following
Milesight DeviceHub=3.0.1-r1
Ubuntu=20.04
Event History
Jun 2, 2024
CVE Published
via MITRE·01:13 PM
Data Sourced
via MITRE·01:13 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-27776?
CVE-2024-27776 has been rated as critical due to the potential for unauthenticated remote code execution.
2
How do I fix CVE-2024-27776?
To mitigate CVE-2024-27776, ensure that the affected software, MileSight DeviceHub, is updated to the latest version released by the vendor.
3
What does CVE-2024-27776 exploit?
CVE-2024-27776 exploits an improper limitation of a pathname to a restricted directory, allowing for path traversal.
4
Who is affected by CVE-2024-27776?
CVE-2024-27776 affects users of MileSight DeviceHub software that have not implemented adequate security measures.
5
What are the potential impacts of CVE-2024-27776?
The potential impacts of CVE-2024-27776 include unauthorized access and remote code execution on affected systems.