CVE-2024-6188

MEDIUM EXPLOITED NUCLEI

Parsec Automation TrackSYS 11.x.x - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2024-6188 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.

Description

A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269159. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Nuclei Templates (1)

TrakSYS 11.x.x - Sensitive Data Exposure
MEDIUMVERIFIEDby s4e-io

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.269159
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.269159
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.354924

Scores

CVSS v3 5.3
EPSS 0.0205
EPSS Percentile 78.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

VulnCheck KEV 2024-07-24
CWE
CWE-425
Status published
Products (1)
Parsec Automation/TrackSYS 11.x.x
Published Jun 20, 2024
Tracked Since Feb 18, 2026