CRITICAL🇵🇱 Wersja polska

CVE-2024-11948

CVSS 9.8v3.1pub. 2024-12-12upd. 2024-12-13

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Telerik Web UI. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-24041.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Gfi Archiver

    APP
    Gfi
    < 15.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2026-2039CRITICAL9.8PL ✓ten sam produkt

GFI Archiver: Pominięcie autoryzacji w MArc.Store umożliwia RCE jako SYSTEM

CVE-2026-2038CRITICAL9.8PL ✓ten sam produkt

GFI Archiver MArc.Core — pominięcie autoryzacji (Authentication Bypass)

CVE-2021-29281CRITICAL9.8ten sam produkt

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation o...

CVE-2026-2036HIGH8.8ten sam produkt

GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabil...

CVE-2026-2037HIGH8.8ten sam produkt

GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabili...