CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-42013: In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. An attacker with Windows...
Description
In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. An attacker with Windows administrative or debugging privileges can patch a binary in memory or on disk to bypass the password login requirement and gain full access to all functions of the program.
Classification
CVE ID: CVE-2024-42013
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.71% (scored less or equal to compared to others)
EPSS Date: 2025-02-20 (when was this score calculated)
References
https://www.graudata.com/en/products/protection-against-ransomware/blocky-for-veeam/https://www.blockyforveeam.com/en/security-bulletin-2024-06-25/