VULNERABILITY INTELLIGENCE
CVE-2024-2097
CVSS score7.5 HIGH
EPSS probability0.46%
CISA KEVNot currently listed
Published2024-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the arbitrary code on the same system where SCMArchivedEventViewerTool is installed in the case of SCM Tools.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-94