CVE-2024-4230

State: Published
Severity: 7.8 High
Published: Dec 19, 2024
Updated: Dec 19, 2024
Reserved: Apr 26, 2024

Description

External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Mitsubishi

Weaknesses

CWE-73 External Control of File Name or Path

Affected Products

Product	Versions
Edgecross Basic Software for WindowsEdgecross Consortium	versions 1.00 and laterAffected
Edgecross Basic Software for DevelopersEdgecross Consortium	versions 1.00 and laterAffected

References

https://www.edgecross.org/client_info/EDGECROSS/view/userweb/ext/en/data-download/pdf/ECD-TE10-0003-01-EN.pdfvendor-advisory
https://jvn.jp/vu/JVNVU92857077/index.htmlgovernment-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.