CVE-2024-6911highCWE-552

CVE-2024-6911: high-severity vulnerability in PerkinElmer ProcessPlus

Unauthenticated Local File Inclusion

Published · Updated

Follow this CVE+ Monitor ProcessPlus

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

36Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 8.7epss 4.9%
Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus: through 1.11.6507.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
PerkinElmer · ProcessPlus
Related CVEs — PerkinElmer ProcessPlus

In the same product, most dangerous first.

CVE-2024-6913CRITICALExecution with Unnecessary PrivilegesEPSS 1.4%CVE-2024-6912CRITICALHardcoded MSSQL CredentialsEPSS 1.1%