How severe is CVE-2024-47903?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 9.1 out of 10.

What type of vulnerability is CVE-2024-47903?

This is classified as CWE-250, which is a common weakness in software security.

CVE-2024-47903 - MEDIUM Severity | CVSS 9.1

Vulnerability Description

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices allows to write arbitrary files to the web server's DocumentRoot directory.

Related Vulnerabilities

CVE-2024-35783

CRITICAL

CVSS:9.1(Critical)

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All versions < V2022 SP1...

CWE-2502024

CVE-2024-42024

CRITICAL

CVSS:9.1(Critical)

A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed.

CWE-2502024

CVE-2024-7387

CRITICAL

CVSS:9.1(Critical)

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder c...

CWE-2502024

CVE-2024-6834

CRITICAL

CVSS:9.0(Critical)

A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by Zowe's client certificate. This allows access to a user to the endpoints requirin...

CWE-2502024

CVE-2018-10856

HIGH

CVSS:8.8(High)

It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.

CWE-2502018

CVE-2018-5413

HIGH

CVSS:8.8(High)

Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilege escalation.

CWE-2502018