CVE-2024-35102

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-15 · updated 2026-06-17

Description

Insecure Permissions vulnerability in VITEC AvediaServer (Model avsrv-m8105) 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script.

Affected products

VITEC Exterity Avediaserver: through 8.6.2-1

References

https://vuln2you.blogspot.com/2024/05/avediaserver-unauthorised-api-access.html
https://vuln2you.blogspot.com/2024/05/avediaserver-unauthorised-api-access.html

Get alerted when CVE-2024-35102 or the next vulnerability affects your stack