CVE-2024-40895 - CVE House
Back to Database
Status published Unknown CVE-2024-40895

FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products...

Vulnerability Description

FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the executable file path is set to a batch file (.bat) or command file (.cmd) extension.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-40895

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

FFRI Security, Inc.

View all reports →

Affected Software

FFRI AMC, FFRI AMC for ActSecure χ, EDR Plus Pack
Vulnerable Versions:
3.4.0 to 3.5.3, Bundled FFRI AMC versions 3.4.0 to 3.5.3

Timeline

Official Publish: July 30th, 2024
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.