216.73.217.86

CVE-2024-57337

· Published 28/05/2025 18:15 · Modified 29/05/2025 14:29

Labels: CVE-2024-57337 2025-05-28CVE-2024-57337[email protected]

Essential information

Published
28/05/2025 18:15
Modified
29/05/2025 14:29
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file.

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
m2soft / crownix cpe:2.3:a:m2soft:crownix:5.0-5.5.14.1070:*:*:*:*:*:*:*
m2soft / crownix cpe:2.3:a:m2soft:crownix:7.0-7.4.3.960:*:*:*:*:*:*:*
m2soft / crownix cpe:2.3:a:m2soft:crownix:8.0-8.2.0.345:*:*:*:*:*:*:*

References