CVE-2024-42017
An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely ac…
Published: 2024-09-30 · CVSS: 10.0 · CVSS 3.1
An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an attacker to execute arbitrary commands with system privilege on the endpoint hosting the application, without any authentication.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7