High severity8.8NVD Advisory· Published Aug 7, 2024· Updated Jun 17, 2026

CVE-2024-7265

Description

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to privilege escalation. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy/EZD RPllm-fuzzy2 versions
from 15 before 15.84, from 16 before 16.15, from 17 before 17.2+ 1 more
- (no CPE)range: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2
- (no CPE)range: 15
Nask/Ezd Rp
cpe:2.3:a:nask:ezd_rp:*:*:*:*:*:*:*:*
Range: >=15,<15.84

Patches

Vulnerability mechanics

References

www.gov.pl/web/ezd-rpnvdProduct
cert.pl/en/posts/2024/08/CVE-2024-7265/nvd
cert.pl/posts/2024/08/CVE-2024-7265/nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000