Medium severity5.1NVD Advisory· Published Jan 15, 2025· Updated Apr 15, 2026

CVE-2024-52783

Description

Insecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c allows attackers to execute arbitrary code via modification of the configuration file.

Affected products

Xinje/Xdpprollm-fuzzy
Range: 3.2.2 to 3.7.17c

Patches

Vulnerability mechanics

References

github.com/Curator-Kim/Vulnerability-mining/blob/master/XDP%20Pro.exe%20incorrect%20permission%20for%20configuration%20file/Incorrect%20permission%20for%20configuration%20file%20in%20XDP%20Pro.exe.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.332
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000