CVE-2024-7265 is an Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP, affecting versions 15 prior to 15.84, 16 prior to 16.15, and 17 prior to 17.2. A logged-in user can exploit this flaw to change the password of any user, including the root user, leading to potential privilege escalation. This vulnerability has a CVSS score of 8.8 (High), indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 15, < 15.84CPE matchmatch criteria | cpe:2.3:a:nask:ezd_rp:*:*:*:*:*:*:*:* | ||
>= 16, < 16.15CPE matchmatch criteria | cpe:2.3:a:nask:ezd_rp:*:*:*:*:*:*:*:* | ||
>= 17, < 17.2CPE matchmatch criteria | cpe:2.3:a:nask:ezd_rp:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:D/RE:L/U:Amber
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.