How severe is CVE-2024-6645?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.3 out of 10.

What type of vulnerability is CVE-2024-6645?

This is classified as CWE-502, which is a common weakness in software security.

CVE-2024-6645

MEDIUM Year: 2024

CVSS v3 Score

6.3

Medium

CVSS v2 Score

6.5

Medium

Weakness Type

CWE-502

View all →

Vulnerability Description

A vulnerability was found in WuKongOpenSource Wukong_nocode up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file ExpressionUtil.java of the component AviatorScript Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-271051.

CVE-2020-4271

MEDIUM

CVSS:6.3(Medium)

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897.

CWE-5022020

CVE-2020-4280

MEDIUM

CVSS:6.3(Medium)

IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function....

CWE-5022020

CVE-2020-4888

MEDIUM

CVSS:6.3(Medium)

IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content...

CWE-5022020

CVE-2021-1413

MEDIUM

CVSS:6.3(Medium)

Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary...

CWE-5022021