CVE-2024-46466

HIGH

ZONECENTRAL <2024.3 or Q.2021.2 - Privilege Escalation

Title source: llm
STIX 2.1

Description

By default, dedicated folders of ZONECENTRAL for Windows up to 2024.3 or up to Q.2021.2 (ANSSI qualification submission) can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZONECENTRAL has to be modified to prevent this vulnerability.

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 5.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-276
Status published
Published Nov 15, 2024
Tracked Since Feb 18, 2026