CVE-2024-6911

HIGH NUCLEI

PerkinElmer ProcessPlus <1.11.6507.0 - Info Disclosure

Title source: llm

Exploitation Summary

CVE-2024-6911 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus: through 1.11.6507.0.

Nuclei Templates (1)

PerkinElmer ProcessPlus <= 1.11.6507.0 - Local File Inclusion

HIGHby s4e-io

FOFA: "Process Plus" && icon_hash="1772087922"

References (2)

Core 2

Core References

Exploit, Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2024/Jul/13

Exploit, Third Party Advisory third-party-advisory

https://cyberdanube.com/en/en-multiple-vulnerabilities-in-perten-processplus/

Scores

CVSS v3 7.5

EPSS 0.0494

EPSS Percentile 91.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

Details

CWE

CWE-552

Status published

Products (1)

perkinelmer/processplus < 1.11.6507.0

Published Jul 22, 2024

Tracked Since Feb 18, 2026