CVE-2024-22074

Dynamsoft Service 1.8.1025 through 1.8.2013, 1.7.0330 through 1.7.2531, 1.6.0428 through 1.6.1112, 1.5.0625 through 1.5.3116, 1.4.0618 through 1.4.1230, and 1.0.516 through 1.3.0115 has Incorrect Access Control. This is fixed in 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212, and 1.3.3212.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::

History

16 Oct 2024, 15:39

Type	Values Removed	Values Added
References	~~() https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/ -~~	() https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/ - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8
CPE		cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
CWE		NVD-CWE-noinfo
First Time		Dynamsoft dynamsoft Service Dynamsoft

07 Jun 2024, 14:56

Type	Values Removed	Values Added
Summary		(es) Dynamsoft Service 1.8.1025 a 1.8.2013, 1.7.0330 a 1.7.2531, 1.6.0428 a 1.6.1112, 1.5.0625 a 1.5.3116, 1.4.0618 a 1.4.1230 y 1.0.516 a 1.3.0115 tiene control de acceso incorrecto. Esto se solucionó en 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212 y 1.3.3212.

06 Jun 2024, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-06-06 21:15

Updated : 2024-10-16 15:39

NVD link : CVE-2024-22074

Mitre link : CVE-2024-22074

CVE.ORG link : CVE-2024-22074

JSON object : View

Products Affected

dynamsoft

dynamsoft_service

CWE

NVD-CWE-noinfo

{"id": "CVE-2024-22074", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-06-06T21:15:48.180", "references": [{"url": "https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Dynamsoft Service 1.8.1025 through 1.8.2013, 1.7.0330 through 1.7.2531, 1.6.0428 through 1.6.1112, 1.5.0625 through 1.5.3116, 1.4.0618 through 1.4.1230, and 1.0.516 through 1.3.0115 has Incorrect Access Control. This is fixed in 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212, and 1.3.3212."}, {"lang": "es", "value": "Dynamsoft Service 1.8.1025 a 1.8.2013, 1.7.0330 a 1.7.2531, 1.6.0428 a 1.6.1112, 1.5.0625 a 1.5.3116, 1.4.0618 a 1.4.1230 y 1.0.516 a 1.3.0115 tiene control de acceso incorrecto. Esto se solucion\u00f3 en 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212 y 1.3.3212."}], "lastModified": "2024-10-16T15:39:58.847", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEF6500D-E54C-4649-BA21-639CDC56AA4C", "versionEndExcluding": "1.3.3212", "versionStartIncluding": "1.0.516"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26B0C115-CF41-4DA3-9AD1-1766C1AB361E", "versionEndExcluding": "1.4.3212", "versionStartIncluding": "1.4.1230"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F6E9392-D683-4908-B737-C5BC17709BB8", "versionEndExcluding": "1.5.31212", "versionStartIncluding": "1.5.0625"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8BFCB02-14DB-4E6E-8397-B7CDA1E7D074", "versionEndExcluding": "1.6.3212", "versionStartIncluding": "1.6.0428"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1595FD37-FC51-41E2-8F4C-4FD08055BFF7", "versionEndExcluding": "1.7.4212", "versionStartIncluding": "1.7.0330"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99BFC038-39B1-4C7D-9C4B-3121F9D5631C", "versionEndExcluding": "1.8.2014", "versionStartIncluding": "1.8.1025"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}