CVE-2024-22074

Dynamsoft Service 1.8.1025 through 1.8.2013, 1.7.0330 through 1.7.2531, 1.6.0428 through 1.6.1112, 1.5.0625 through 1.5.3116, 1.4.0618 through 1.4.1230, and 1.0.516 through 1.3.0115 has Incorrect Access Control. This is fixed in 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212, and 1.3.3212.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/	Vendor Advisory
https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::
	cpe:2.3:a:dynamsoft:dynamsoft_service::::::::

History

18 Mar 2025, 21:15

Type	Values Removed	Values Added
CWE		CWE-284

Information

Published : 2024-06-06 21:15

Updated : 2025-03-18 21:15

NVD link : CVE-2024-22074

Mitre link : CVE-2024-22074

CVE.ORG link : CVE-2024-22074

JSON object : View

Products Affected

dynamsoft

dynamsoft_service

CWE

NVD-CWE-noinfo CWE-284

Improper Access Control

{"id": "CVE-2024-22074", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-06-06T21:15:48.180", "references": [{"url": "https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.dynamsoft.com/support/security-bulletin-dwt-2024-22074/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Dynamsoft Service 1.8.1025 through 1.8.2013, 1.7.0330 through 1.7.2531, 1.6.0428 through 1.6.1112, 1.5.0625 through 1.5.3116, 1.4.0618 through 1.4.1230, and 1.0.516 through 1.3.0115 has Incorrect Access Control. This is fixed in 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212, and 1.3.3212."}, {"lang": "es", "value": "Dynamsoft Service 1.8.1025 a 1.8.2013, 1.7.0330 a 1.7.2531, 1.6.0428 a 1.6.1112, 1.5.0625 a 1.5.3116, 1.4.0618 a 1.4.1230 y 1.0.516 a 1.3.0115 tiene control de acceso incorrecto. Esto se solucion\u00f3 en 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212 y 1.3.3212."}], "lastModified": "2025-03-18T21:15:23.753", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEF6500D-E54C-4649-BA21-639CDC56AA4C", "versionEndExcluding": "1.3.3212", "versionStartIncluding": "1.0.516"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26B0C115-CF41-4DA3-9AD1-1766C1AB361E", "versionEndExcluding": "1.4.3212", "versionStartIncluding": "1.4.1230"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F6E9392-D683-4908-B737-C5BC17709BB8", "versionEndExcluding": "1.5.31212", "versionStartIncluding": "1.5.0625"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8BFCB02-14DB-4E6E-8397-B7CDA1E7D074", "versionEndExcluding": "1.6.3212", "versionStartIncluding": "1.6.0428"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1595FD37-FC51-41E2-8F4C-4FD08055BFF7", "versionEndExcluding": "1.7.4212", "versionStartIncluding": "1.7.0330"}, {"criteria": "cpe:2.3:a:dynamsoft:dynamsoft_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99BFC038-39B1-4C7D-9C4B-3121F9D5631C", "versionEndExcluding": "1.8.2014", "versionStartIncluding": "1.8.1025"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}