Lucene search
HistoryFeb 04, 2024 - 10:15 p.m.
CVE-2024-25089
malwarebytes
windows firewall control
remote code execution
grpc
named pipes
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
62.2%
Malwarebytes Binisoft Windows Firewall Control before 6.9.9.2 allows remote attackers to execute arbitrary code via gRPC named pipes.
Affected configurations
Node
malwarebytesbinisoft_windows_firewall_controlRange<6.9.9.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| malwarebytes | binisoft_windows_firewall_control | * | cpe:2.3:a:malwarebytes:binisoft_windows_firewall_control:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-25089
2024-02-04 00:00:00
cve
cve
CVE-2024-25089
2024-02-04 22:15:23
prion
prion
Code injection
2024-02-04 22:15:00
vulnrichment
vulnrichment
CVE-2024-25089
2024-02-04 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
62.2%
Related for NVD:CVE-2024-25089