VULNERABILITY INTELLIGENCE
CVE-2024-46466
CVSS score7.8 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2024-11-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H
Description
By default, dedicated folders of ZONECENTRAL for Windows up to 2024.3 or up to Q.2021.2 (ANSSI qualification submission) can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZONECENTRAL has to be modified to prevent this vulnerability.
Weakness classification
- CWE-276: Incorrect Default Permissions