CVE-2024-6644: zmops ArgusDBM AviatorScript CalculateAlarm.java getDefaultClassLoader deserialization

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-10 · updated 2026-06-17
Weakness: CWE-502

Description

A vulnerability was found in zmops ArgusDBM up to 0.1.0. It has been classified as critical. Affected is the function getDefaultClassLoader of the file CalculateAlarm.java of the component AviatorScript Handler. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-271050 is the identifier assigned to this vulnerability.

Affected products

zmops ArgusDBM: 0.1

References

https://github.com/zmops/ArgusDBM/issues/64
https://vuldb.com/?ctiid.271050
https://vuldb.com/?id.271050
https://vuldb.com/?submit.367347
https://github.com/zmops/ArgusDBM/issues/64
https://vuldb.com/?ctiid.271050
https://vuldb.com/?id.271050
https://vuldb.com/?submit.367347

Get alerted when CVE-2024-6644 or the next vulnerability affects your stack