CVE-2024-3375

CRITICAL

Havelsan Inc. Dialogue <1.83.1-1.84 - Privilege Escalation

Title source: llm

Description

Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc. Dialogue allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dialogue: from v1.83 before v1.83.1 or v1.84.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource

https://www.usom.gov.tr/bildirim/tr-24-0363

Scores

CVSS v3 9.4

EPSS 0.0017

EPSS Percentile 38.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-732

Status published

Products (1)

Havelsan Inc./Dialogue v1.83 - v1.83.1 or v1.84

Published Apr 29, 2024

Tracked Since Feb 18, 2026