PatchTheCVEprocessplus vulnerabilities and fixes
Recent CVEs affecting processplus, with upgrade or downgrade steps. 3 tracked.
processplus has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-07-22. Highest priority: CVE-2024-6912 (score 61/100).
- CVE-2024-6913 HIGH 8.8 UPGRADE Execution with unnecessary privileges in PerkinElmer ProcessPlus allows an attacker to spawn a remote shell on
- CVE-2024-6912 CRITICAL 9.8 UPGRADE Use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows allows an attacker to login remove o
- CVE-2024-6911 HIGH 7.5 UPGRADE Files on the Windows system are accessible without authentication to external parties due to a local file incl
FAQ
How do I fix processplus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is processplus being exploited right now?
None of the tracked processplus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which processplus CVE should I patch first?
CVE-2024-6912 currently ranks highest (61/100): Use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows allows an attacker to login remove o.