CVE-2024-42017: Critical severity atos eviden icare vulnerability
An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an attacker to execute arbitrary commands with system privilege on the endpoint hosting the application, without any authentication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42017?
CVE-2024-42017 is classified as a critical vulnerability due to its potential for remote command execution with system privileges.
How do I fix CVE-2024-42017?
To remediate CVE-2024-42017, upgrade Atos Eviden iCare to a version above 2.7.11 where the vulnerability has been addressed.
What are the risks associated with CVE-2024-42017?
The risks include unauthorized remote access and the ability for attackers to execute arbitrary commands, potentially compromising the entire system.
Which versions of Atos Eviden iCare are affected by CVE-2024-42017?
CVE-2024-42017 affects Atos Eviden iCare versions 2.7.1 through 2.7.11.
Can CVE-2024-42017 be exploited remotely?
Yes, if the application is remotely accessible, CVE-2024-42017 can be exploited by an attacker.