CVE-2024-38392: Critical severity pexip infinity connect vulnerability
Published Apr 2, 2025
·Updated
Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cause the application to run untrusted code.
Affected Software
1 affected component
Pexip Infinity Connect<1.13.0
Event History
Apr 2, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38392?
CVE-2024-38392 has been classified as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2024-38392?
To fix CVE-2024-38392, upgrade Pexip Infinity Connect to version 1.13.0 or later.
3
What type of vulnerability is CVE-2024-38392?
CVE-2024-38392 is an authenticity verification vulnerability that allows untrusted code execution.
4
Who is affected by CVE-2024-38392?
CVE-2024-38392 affects users of Pexip Infinity Connect versions prior to 1.13.0.
5
Can CVE-2024-38392 lead to data loss?
Yes, CVE-2024-38392 can potentially lead to data loss due to the execution of untrusted code.