CVE-2024-46939 Vulnerability Details

  /     /     /  

CVE-2024-46939 Metadata Quick Info

CVE Published: 28/11/2024 | CVE Updated: 02/12/2024 | CVE Year: 2024
Source: Vivo | Vendor: vivo | Product: Game Extension Engine
Status : PUBLISHED

---

CVE-2024-46939 Description

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-22
CWE Name: CWE-22 Improper Limitation of a Pathname to a Restricted Directory
Source: vivo

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID: CAPEC-186
CAPEC Description: CAPEC-186 Malicious Software Update


Source: NVD (National Vulnerability Database).