CVE-2024-33597

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Missing Authorization vulnerability in ProFaceOff SSU.This issue affects SSU: from n/a through 1.5.0.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Apr 29, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-335985.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Twinpictures Annual Archive allows StoCVE-2024-335998.1nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requeCVE-2024-33609.8A vulnerability, which was classified as critical, was found in SourceCodester Online Library System 1.0. Affected is an unknown function ofCVE-2024-336005.9nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup responCVE-2024-336017.3nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc oCVE-2024-336027.4nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory wCVE-2024-336035.3The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to accesCVE-2024-336046.1A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker tCVE-2024-336057.5Improper processing of some parameters of installed_emanual_list.html leads to a path traversal vulnerability. As for the details of affecteCVE-2024-336068.8An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MiCVE-2024-336075.6Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enabCVE-2024-336087.5When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note:
CVE-2024-33597: High severity, CVSS 7.5 | Vulnix