CVE-2024-56086

HIGH

Logpoint SIEM < 7.5.0 - Authenticated Remote Code Execution via Report Template Injection

Title source: llm
STIX 2.1

Description

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution.

References (1)

Core 1

Scores

CVSS v3 7.1
EPSS 0.0040
EPSS Percentile 31.6%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-77
Status published
Products (1)
logpoint/siem < 7.5.0
Published Dec 16, 2024
Tracked Since Feb 18, 2026