FKIE_CVE-2024-50302

Vulnerability from fkie_nvd - Published: 2024-11-19 02:16 - Updated: 2026-05-12 18:47
Severity
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Summary
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aafPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0bPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26Patch
af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/01/msg00001.htmlMailing List
af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/03/msg00002.htmlMailing List
0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-265688.htmlThird Party Advisory
0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-355557.htmlThird Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302US Government Resource
Impacted products
Vendor Product Version
google android -
debian debian_linux 11.0
siemens simatic_s7-1500_tm_mfp_firmware -
siemens simatic_s7-1500_tm_mfp -
siemens sinec_os *
siemens ruggedcom_rst2428p -
siemens scalance_xc316-8 -
siemens scalance_xc319-4 -
siemens scalance_xc324-4 -
siemens scalance_xc324-4eec -
siemens scalance_xc332 -
siemens scalance_xc416-8 -
siemens scalance_xc419-4 -
siemens scalance_xc424-4 -
siemens scalance_xc432 -
siemens scalance_xch328 -
siemens scalance_xcm324 -
siemens scalance_xcm328 -
siemens scalance_xcm332 -
siemens scalance_xr302-32 -
siemens scalance_xr322-12 -
siemens scalance_xr326-8 -
siemens scalance_xr326-8eec -
siemens scalance_xr502-32 -
siemens scalance_xr522-12 -
siemens scalance_xr524-8c -
siemens scalance_xr524-8wg -
siemens scalance_xr526-8 -
siemens scalance_xr526-8c -
siemens scalance_xr528-6m -
siemens scalance_xr552-12m -
siemens scalance_xrh334 -
siemens scalance_xrm334 -
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel *
linux linux_kernel 6.12
linux linux_kernel 6.12
linux linux_kernel 6.12
linux linux_kernel 6.12
linux linux_kernel 6.12
linux linux_kernel 6.12
To clipboard 

{
  "cisaActionDue": "2025-03-25",
  "cisaExploitAdd": "2025-03-04",
  "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
  "cisaVulnerabilityName": "Linux Kernel Use of Uninitialized Resource Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F6C0262-1527-4F55-8BDE-973F59FE7E1B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "754051AB-27D3-41CA-B2C8-79BAD48C8750",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:sinec_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA64F29A-AD82-4C61-BA69-AC9ABF9CFEF5",
              "versionEndExcluding": "3.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:ruggedcom_rst2428p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5162CF70-42A4-4CBD-BE7E-17526719138A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xc316-8:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5A0BBD2-432C-4C37-A371-EC11A00D52D8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xc319-4:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7BBF5B37-DC44-42A1-A2D1-3D3BBE31BEEC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xc324-4:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "76572367-5EDD-438E-9682-25C243014840",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xc324-4eec:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4C044CD-DA0B-4010-BABC-83C5FB9856D8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xc332:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B320F7CF-B10C-45EB-9C90-929D1559F2BF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xc416-8:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6AE4732-7607-400A-A91E-6DF461D87960",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xc419-4:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FCDCCBC-DAEF-4068-AEE7-05C94E681A32",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xc424-4:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5CEC02B5-FCB5-4A84-8525-6554924C2F92",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xc432:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "26F3FFB6-C652-4A86-B335-99E135A1E46F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xch328:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "782C249B-9E3A-4434-85D6-1F69A038D829",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xcm324:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "136D0CA3-725F-4D2F-9CC8-50900A6B34C8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xcm328:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2EC8600-BA60-4924-B884-AFAA2479148F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xcm332:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "05A09417-83A6-42AC-A89E-DEFDC942DA39",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr302-32:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9466814-A230-4AC9-AB45-0E239AC6D835",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr322-12:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D120370-64EE-4BA5-AE3D-0DC4BB981935",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr326-8:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6361663-6D4A-408D-B3CD-694988C95AB5",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr326-8eec:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "16FFF08F-677B-448A-82E1-E76707D9E6F1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr502-32:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3A037C08-0764-452D-A821-8948164C480A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr522-12:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "467779F9-C715-402E-9A5B-80015424B129",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0E6B7D8-3F9E-43D6-AEFE-DEE3993679C5",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr524-8wg:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE3879F0-02AB-4ABE-9753-BED7BA46965A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr526-8:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9ECC2EEE-B583-45E0-AEAC-B1225CEBAA30",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "67661569-6233-4C74-9C72-88BD14B257FE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E048C4A-A414-4C87-A865-4D4218AE32EE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xr552-12m:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A806691-3F4B-46AA-9718-2F6BF0FD3D7A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xrh334:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "06FA1667-965A-4119-A519-F9119B5358DF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:siemens:scalance_xrm334:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5FC3042-0224-45AE-B516-7934EF15DCC8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D982986-F7AE-4B56-8E3E-D34CE2B7AF38",
              "versionEndExcluding": "4.19.324",
              "versionStartIncluding": "3.12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9952C897-8A61-4D4B-9D6D-7D063E9EA15E",
              "versionEndExcluding": "5.4.286",
              "versionStartIncluding": "4.20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF5B32D0-72C9-41C3-A0BB-D4946153C134",
              "versionEndExcluding": "5.10.230",
              "versionStartIncluding": "5.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "88812664-4296-42AC-AE0F-ED71086C1BB1",
              "versionEndExcluding": "5.15.172",
              "versionStartIncluding": "5.11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DD7F755-2F6B-4707-8973-78496AD5AA8E",
              "versionEndExcluding": "6.1.117",
              "versionStartIncluding": "5.16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "630ED7EB-C97E-4435-B884-1E309E40D6F3",
              "versionEndExcluding": "6.6.61",
              "versionStartIncluding": "6.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BD000F7-3DAD-4DD3-8906-98EA1EC67E95",
              "versionEndExcluding": "6.11.8",
              "versionStartIncluding": "6.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "7F361E1D-580F-4A2D-A509-7615F73167A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "925478D0-3E3D-4E6F-ACD5-09F28D5DF82C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "3C95E234-D335-4B6C-96BF-E2CEBD8654ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*",
              "matchCriteriaId": "E0F717D8-3014-4F84-8086-0124B2111379",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*",
              "matchCriteriaId": "24DBE6C7-2AAE-4818-AED2-E131F153D2FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*",
              "matchCriteriaId": "24B88717-53F5-42AA-9B72-14C707639E3F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: zero-initialize the report buffer\n\nSince the report buffer is used by all kinds of drivers in various ways, let\u0027s\nzero-initialize it during allocation to make sure that it can\u0027t be ever used\nto leak kernel memory via specially-crafted report."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: n\u00facleo: inicializar en cero el b\u00fafer de informes Dado que el b\u00fafer de informes es utilizado por todo tipo de controladores de diversas formas, vamos a inicializarlo en cero durante la asignaci\u00f3n para asegurarnos de que nunca pueda usarse para filtrar memoria del kernel a trav\u00e9s de un informe especialmente manipulado."
    }
  ],
  "id": "CVE-2024-50302",
  "lastModified": "2026-05-12T18:47:16.597",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-11-19T02:16:32.320",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/05ade5d4337867929e7ef664e7ac8e0c734f1aaf"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/177f25d1292c7e16e1199b39c85480f7f8815552"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/1884ab3d22536a5c14b17c78c2ce76d1734e8b0b"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/3f9e88f2672c4635960570ee9741778d4135ecf5"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/492015e6249fbcd42138b49de3c588d826dd9648"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/9d9f5c75c0c7f31766ec27d90f7a6ac673193191"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/d7dc68d82ab3fcfc3f65322465da3d7031d4ab46"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/e7ea60184e1e88a3c9e437b3265cbb6439aa7e26"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
    },
    {
      "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
    },
    {
      "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-355557.html"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-908"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.