CVE-2024-47935

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance. This issue affects StellarProtect (Legacy Mode): before 3.2; StellarEnforce: before 3.2; Safe Lock: from 3.0.0 before 3.1.1076. *Note: StellarProtect (Legacy Mode) is the new name for StellarEnforce, they are the same product.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-354

Affected software

No affected versions have been published.

Timeline

Published
Feb 17, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-479397.7Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerCVE-2024-47948.8A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this vulnerability CVE-2024-479407.8A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of boundCVE-2024-479417.8A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of boundCVE-2024-479427.3A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijacCVE-2024-479439.8The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch CVE-2024-479446.8The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leadCVE-2024-479459.8The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are prCVE-2024-479467.2If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with inCVE-2024-479474.7Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of otherCVE-2024-479487.5In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backupsCVE-2024-479497.5In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location