← back
CVE-2024-25103

Dynamic Link Library (DLL) Hijacking Vulnerability in CDAC AppSamvid Software

CVSS 6.3 MEDIUMEPSS 0.2%CWE-426
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.3EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
06 Mar 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
This vulnerability exists in AppSamvid software due to the usage of vulnerable and outdated components. An attacker with local administrative privileges could exploit this by placing malicious DLLs on the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on the targeted system.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →