CVE-2024-4701

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
NetflixGenie<= 4.3.18
netflixgenie< 4.3.18

References

Timeline

Published
May 14, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-470109.8Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.CVE-2024-470117.5Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive informationCVE-2024-470127.8In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could CVE-2024-470137.8In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This could lead to local eCVE-2024-470148.8Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.CVE-2024-470155.5In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds cCVE-2024-470167.8there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additionCVE-2024-470177.8In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation oCVE-2024-470185.5In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. This could lead to localCVE-2024-470195.5In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. ThCVE-2024-47025.4The Mega Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, anCVE-2024-470207.5Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.
CVE-2024-4701: Critical severity, CVSS 9.9 | Vulnix