CVE-2024-41270

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

An issue discovered in the RunHTTPServer function in Gorush v1.18.4 allows attackers to intercept and manipulate data due to use of deprecated TLS version.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published: Aug 6, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-412769.8A vulnerability in Kaiten version 57.131.12 and earlier allows attackers to bypass the PIN code authentication mechanism. The application re CVE-2024-41284.3This vulnerability was a potential CSRF attack. When running the Firebase emulator suite, there is an export endpoint that is used normally CVE-2024-412818.8Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function.CVE-2024-412859.8A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS CVE-2024-41298.8Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authenti CVE-2024-412908.1FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.CVE-2024-41307.8A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges.CVE-2024-413045.4An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via CVE-2024-413054.7A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary req CVE-2024-413087.8An issue in the Ping feature of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and gain root-CVE-2024-413097.8An issue in the Hardware info module of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and ga CVE-2024-41317.8A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated privileges.