CVE-2024-6618: Path Traversal in Ocean Data Systems Dream Report

Published Aug 13, 2024

Updated

In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library (DLL).

Affected Software

1 affected component

Ocean Data Systems Dream Report

Remediation

Information

Ocean Data Systems recommends users update to the following: * Dream Report 2023 R2: Version 23.3.18952.0523 For more information, see Dream Report Version 2023 R2 Released https://dreamreport.net/ . AVEVA recommends users of affected versions upgrade to the versions listed below and apply the corresponding security update: * Update to AVEVA Reports for Operations 2023 R2 https://softwaresupportsp.aveva.com/#/producthub/details or later For more information, see security bulletin AVEVA-2024-006 https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2024-006.pdf .

Event History

Aug 13, 2024

CVE Published

via MITRE·04:37 PM

Data Sourced

via MITRE·04:37 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-6618?

CVE-2024-6618 is considered a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2024-6618?

To fix CVE-2024-6618, update Ocean Data Systems Dream Report to the latest patched version as provided by the vendor.

What type of attack does CVE-2024-6618 enable?

CVE-2024-6618 enables path traversal attacks that can lead to remote code execution through unauthorized DLL injection.

Which software versions are affected by CVE-2024-6618?

CVE-2024-6618 affects all versions of Ocean Data Systems Dream Report prior to the application of the security patch.

What impact does CVE-2024-6618 have on affected systems?

The impact of CVE-2024-6618 on affected systems can be severe, allowing attackers to execute arbitrary code with potentially full system privileges.