CVE-2024-6001

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

An improper certificate validation vulnerability was reported in LADM that could allow a network attacker with the ability to redirect an update request to a remote server and execute code with elevated privileges.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-295

Affected software

VendorProductVersions
LenovoAccessories and Display Manager< 1.0.5.0.5

References

Timeline

Published
Dec 16, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-60037.3A vulnerability was found in Guangdong Baolun Electronics IP Network Broadcasting Service Platform 2.0. It has been classified as critical. CVE-2024-60046.5A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to dCVE-2024-60053.5A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been declared as problematic. Affected by this vulnerability is an CVE-2024-60063.5A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this issue is some unknown fCVE-2024-60079.8A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of CVE-2024-60088.8A vulnerability, which was classified as critical, was found in itsourcecode Online Book Store up to 1.0. Affected is an unknown function ofCVE-2024-60099.8A vulnerability has been found in itsourcecode Event Calendar 1.0 and classified as critical. Affected by this vulnerability is the functionCVE-2024-60105.3The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This iCVE-2024-60114.8The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textarea.description’ parameter in alCVE-2024-60124.3The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on theCVE-2024-60139.8A vulnerability was found in itsourcecode Online Book Store 1.0. It has been rated as critical. This issue affects some unknown processing oCVE-2024-60149.8A vulnerability classified as critical has been found in itsourcecode Document Management System 1.0. Affected is an unknown function of the