CVE-2024-52783

MEDIUM

XINJE XDPPro.exe 3.2.2-3.7.17c - Arbitrary Code Execution via Configuration File Modification

Title source: llm

Description

Insecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c allows attackers to execute arbitrary code via modification of the configuration file.

References (1)

Core 1

Core References

Various Sources

https://github.com/Curator-Kim/Vulnerability-mining/blob/master/XDP%20Pro.exe%20incorrect%20permission%20for%20configuration%20file/Incorrect%20permission%20for%20configuration%20file%20in%20XDP%20Pro.exe.md

Scores

CVSS v3 5.1

EPSS 0.0017

EPSS Percentile 6.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-276

Status published

Published Jan 15, 2025

Tracked Since Feb 18, 2026