CVE-2024-48200: High severity mobaxterm vulnerability
Published Oct 31, 2024
·Updated
An issue in MobaXterm v24.2 allows a local attacker to escalate privileges and execute arbitrary code via the remove function of the MobaXterm MSI is spawning one Administrative cmd (conhost.exe)
Affected Software
1 affected component
Mobatek MobaXterm
Event History
Oct 31, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-48200?
CVE-2024-48200 is a high severity vulnerability that allows local attackers to escalate privileges.
2
How can I mitigate CVE-2024-48200?
To mitigate CVE-2024-48200, ensure that MobaXterm is updated to the latest version released by Mobatek.
3
Who is affected by CVE-2024-48200?
CVE-2024-48200 affects users of MobaXterm v24.2 running on Windows operating systems.
4
What type of attacks are possible with CVE-2024-48200?
CVE-2024-48200 allows a local attacker to execute arbitrary code due to improper handling of administrative commands.
5
Is there a patch available for CVE-2024-48200?
Yes, a patch for CVE-2024-48200 is available in the recent version updates from the vendor.