VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 29, 2024· Updated Jun 17, 2026

CVE-2024-24525

CVE-2024-24525

Description

An issue in EpointWebBuilder 5.1.0-sp1, 5.2.1-sp1, 5.4.1 and 5.4.2 allows a remote attacker to execute arbitrary code via the infoid parameter of the URL.

Affected products

6
  • Epoint/EpointWebBuilder5 versions
    cpe:2.3:a:epoint:epointwebbuilder:5.1.0:sp1:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:epoint:epointwebbuilder:5.1.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:epoint:epointwebbuilder:5.2.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:epoint:epointwebbuilder:5.4.1:-:*:*:*:*:*:*
    • cpe:2.3:a:epoint:epointwebbuilder:5.4.2:-:*:*:*:*:*:*
    • (no CPE)range: 5.1.0-sp1, 5.2.1-sp1, 5.4.1, 5.4.2
  • Epoint/WebBuilderdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.