VULNERABILITY INTELLIGENCE
CVE-2024-30164
CVSS score6.7 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2024-05-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This is resolved in 3.11.1 on Windows, 3.9.1 on macOS, and 3.12.1 on Linux. NOTE: although the macOS resolution is the same as for CVE-2024-30165, this vulnerability on macOS is not the same as CVE-2024-30165.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-120