VULNERABILITY INTELLIGENCE
CVE-2024-40895
CVSS score6.4 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2024-07-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
Description
FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the executable file path is set to a batch file (.bat) or command file (.cmd) extension.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-78