CVE-2024-24722

State: Published
Severity: 9.1 Critical
Published: Feb 19, 2024
Updated: Mar 25, 2025
Reserved: Jan 27, 2024

Description

An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevated privileges via the 12d Synergy Server and/or 12d Synergy File Replication Server executable service path. This is fixed in 4.3.10.192, 5.1.5.221, and 5.1.6.235.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	CISA-ADP

Weaknesses

CWE-428 Unquoted Search Path or Element

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.12dsynergy.com/security-statement/
https://files.12dsynergy.com/downloads/download.aspx
https://help.12dsynergy.com/v1/docs/cve-2024-24722

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.