CVE-2024-22074

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/", "name": "https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/", "tags": ["Vendor Advisory"], "refsource": ""}, {"url": "https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/", "name": "https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/", "tags": ["Vendor Advisory"], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Dynamsoft Service 1.8.1025 through 1.8.2013, 1.7.0330 through 1.7.2531, 1.6.0428 through 1.6.1112, 1.5.0625 through 1.5.3116, 1.4.0618 through 1.4.1230, and 1.0.516 through 1.3.0115 has Incorrect Access Control. This is fixed in 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212, and 1.3.3212."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2024-22074", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}}, "publishedDate": "2024-06-06T21:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.3.3212", "versionStartIncluding": "1.0.516"}, {"cpe23Uri": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.4.3212", "versionStartIncluding": "1.4.1230"}, {"cpe23Uri": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.5.31212", "versionStartIncluding": "1.5.0625"}, {"cpe23Uri": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.6.3212", "versionStartIncluding": "1.6.0428"}, {"cpe23Uri": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.7.4212", "versionStartIncluding": "1.7.0330"}, {"cpe23Uri": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.8.2014", "versionStartIncluding": "1.8.1025"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-03-18T21:15Z"}