CVE-2024-45692

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

No affected versions have been published.

Timeline

Published
Sep 4, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-456938.8Users logged into the Apache CloudStack's web interface can be tricked to submit malicious CSRF requests due to missing validation of the orCVE-2024-456949.8The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticaCVE-2024-456959.8The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticaCVE-2024-456968.8Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forCVE-2024-456979.8Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. UCVE-2024-456989.8Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackeCVE-2024-456995.4The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is causedCVE-2024-45705.4The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, anCVE-2024-457006.5Zabbix server is vulnerable to a DoS vulnerability due to uncontrolled resource exhaustion. An attacker can send specially crafted requests CVE-2024-457095.5SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on LinuxCVE-2024-457107.8SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privCVE-2024-457118.8SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges giv
CVE-2024-45692: High severity, CVSS 7.5 | Vulnix