CVE-2024-6787
MEDIUMTOCTOU - Code Injection
Title source: llmDescription
This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it is used (TOCTOU). By exploiting this race condition, an attacker can write arbitrary files to the system. This could allow the attacker to execute malicious code and potentially cause file losses.
References (2)
Scores
CVSS v3
5.3
EPSS
0.0037
EPSS Percentile
58.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Classification
CWE
CWE-367
Status
published
Affected Products (1)
moxa/mxview_one
< 1.4.1
Timeline
Published
Sep 21, 2024
Tracked Since
Feb 18, 2026