CVEvulnerability

CVE-2024-46465

7.8 HIGH Published 2024-11-15 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-11-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H
Weaknesses
CWE-276

Description

By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of CRYHOD has to be modified to prevent this vulnerability.

Affected configurations

• primx cryhod (<= 2024.3)

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References