CVE-2024-8934

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A local user with administrative access rights can enter specialy crafted values for settings at the user interface (UI) of the TwinCAT Package Manager which then causes arbitrary OS commands to be executed.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Oct 31, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-89357.5CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause a denial of service and loss of confidentiality and integri CVE-2024-89366.5CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Ma CVE-2024-89376.5CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary CVE-2024-89388.1CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary CVE-2024-89396.2A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the vllm JSON web API can l CVE-2024-89409.8Vulnerability in the Scriptcase application version 9.4.019, which involves the arbitrary upload of a file via /scriptcase/devel/lib/third/j CVE-2024-89415.3Path traversal vulnerability in Scriptcase version 9.4.019, in /scriptcase/devel/compat/nm_edit_php_edit.php (in the “subpage” parameter), w CVE-2024-89428.2Vulnerability in Scriptcase version 9.4.019 that consists of a Cross-Site Scripting (XSS), due to the lack of input validation, affecting th CVE-2024-89439.8The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12. This is due to insuffic CVE-2024-89449.8A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part o CVE-2024-89458.8A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability affects unkn CVE-2024-89467.5A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extm