CVE-2024-2620

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this vulnerability is an unknown functionality of the file api/client/down_file.php. The manipulation of the argument uuid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257197 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Mar 19, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-262008.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-262016.6Microsoft Intune Linux Agent Elevation of Privilege VulnerabilityCVE-2024-262027.2DHCP Server Service Remote Code Execution VulnerabilityCVE-2024-262037.3Azure Data Studio Elevation of Privilege VulnerabilityCVE-2024-262047.5Outlook for Android Information Disclosure VulnerabilityCVE-2024-262058.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-262075.5Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-262087.2Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2024-262095.5Microsoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityCVE-2024-26219.8A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected CVE-2024-262108.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2024-262117.8Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2024-2620: Critical severity, CVSS 9.8 | Vulnix