How severe is CVE-2024-6153?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.8 out of 10.

What type of vulnerability is CVE-2024-6153?

This is classified as CWE-693, which is a common weakness in software security.

CVE-2024-6153 - HIGH Severity | CVSS 7.8

Vulnerability Description

Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows local attackers to downgrade Parallels software on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Updater service. The issue results from the lack of proper validation of version information before performing an update. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-19481.

Related Vulnerabilities

CVE-2017-6261

HIGH

CVSS:7.8(High)

NVIDIA Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclosu...

CWE-6932017

CVE-2018-11459

HIGH

CVSS:7.8(High)

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions <...

CWE-6932018

CVE-2018-11460

HIGH

CVSS:7.8(High)

CWE-6932018

CVE-2018-9312

HIGH

CVSS:7.8(High)

The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows a local attack when a USB de...

CWE-6932018

CVE-2018-9320

HIGH

CVSS:7.8(High)

CWE-6932018

CVE-2018-9322

HIGH

CVSS:7.8(High)

The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through 2018 allows local attacks involving the ...

CWE-6932018