CVE-2024-33006

CVE-2024-33006 describes a critical vulnerability where an unauthenticated attacker can upload a malicious file to a server, leading to complete system compromise when accessed by a victim. While specific affected products are not detailed in the provided data, SecurityWeek reported patches for SAP CX Commerce and NetWeaver related to critical vulnerabilities, suggesting potential relevance. This vulnerability carries a CVSS score of 9.6 (Critical), indicating a network-based attack with low complexity, requiring user interaction, and resulting in high impact to confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, though it has garnered limited community discussion and media coverage.