CVE-2024-6787
MEDIUM EPSS 17.4%
Published Sep 21, 20241y ago · Modified Jun 17, 20261w ago
6.0 CVSS 4.0
Published Sep 21, 2024 1y ago
Last Modified Jun 17, 2026 1w ago
Description
This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it is used (TOCTOU). By exploiting this race condition, an attacker can write arbitrary files to the system. This could allow the attacker to execute malicious code and potentially cause file losses.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Network
Attack Complexity High
Privileges Required Low
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
17.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-367
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| moxa | mxview_one | * | <1.4.1 |
References 2
Remediation
- moxa.com https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series