VULNERABILITY INTELLIGENCE
CVE-2024-8531
CVSS score7.2 HIGH
EPSS probability0.46%
CISA KEVNot currently listed
Published2024-10-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
Weakness classification
- cybersecurity@se.com: CWE-347