CVE-2024-47553

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate user input to the ```ssmctl-client``` command. This could allow an authenticated, lowly privileged remote attacker to execute arbitrary code with root privileges on the underlying OS.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-88

Affected software

No affected versions have been published.

Timeline

Published: Oct 8, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-475544.3Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively CVE-2024-475558.3Missing Authentication - User & System Configuration CVE-2024-475569.8Pre-Auth RCE via Path Traversal CVE-2024-475579.8Pre-Auth RCE via Path Traversal CVE-2024-475588.8Authenticated RCE via Path Traversal CVE-2024-475598.8Authenticated RCE via Path Traversal CVE-2024-47565.4The WP Backpack WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such CVE-2024-475607.8RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended CVE-2024-475617.3Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommende CVE-2024-475628.8A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize CVE-2024-475635.3A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a CVE-2024-475654.3A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate t