PatchTheCVEb1ackc4t vulnerabilities
Recent CVEs affecting b1ackc4t products. 4 tracked.
b1ackc4t has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-07-10. Highest priority: CVE-2024-37770 (score 61/100).
- CVE-2024-37770 CRITICAL 9.1 DOWNGRADE 14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint func
- CVE-2024-37769 HIGH 8.8 DOWNGRADE Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator
- CVE-2024-37768 CRITICAL 9.1 DOWNGRADE 14Finger v1.1 was discovered to contain an arbitrary user deletion vulnerability via the component /api/admin/
- CVE-2024-37767 HIGH 7.5 DOWNGRADE Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user inf
FAQ
How do I fix b1ackc4t vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is b1ackc4t being exploited right now?
None of the tracked b1ackc4t CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which b1ackc4t CVE should I patch first?
CVE-2024-37770 currently ranks highest (61/100): 14Finger v1.1 was discovered to contain a remote command execution (RCE) vulnerability in the fingerprint func.