What’s Vulnerable › Vulnerabilities
CVE-2024-30170
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-08-06 · updated 2026-06-17
- Weakness: CWE-400
Description
PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1, 32.3, 31.3, and later, and in major version 34.0 and later,
Affected products
- SSH Privx: from 22.0 before 31.3; from 32.0 before 32.3; 33.0 — fixed in 31.3, 32.3
How to fix
Upgrade to a fixed version: SSH Privx 31.3, 32.3. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-30170 or the next vulnerability affects your stack