Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2024-3460
Analyzed
More InfoOfficial Page
Source-cvd@cert.pl
View Known Exploited Vulnerability (KEV) details
Published At-14 May, 2024 | 15:41
Updated At-12 Feb, 2025 | 15:36

In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing a short time window before the forced automatic logout occurs. Then, by using some built-in function of these applications, one may launch any other programs.  In order to exploit this vulnerability external applications must be left running when the KioWare software is launched. Additionally, an attacker must know the PIN set for this Kioware instance and also slow down the application with some specific task which extends the usable time window.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.17.4HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary3.17.0HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Type: Secondary
Version: 3.1
Base score: 7.4
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Type: Primary
Version: 3.1
Base score: 7.0
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CPE Matches

kioware
kioware
>>kioware>>Versions up to 8.34(inclusive)
cpe:2.3:a:kioware:kioware:*:*:*:*:*:windows:*:*
Weaknesses
CWE IDTypeSource
CWE-424Secondarycvd@cert.pl
NVD-CWE-OtherPrimarynvd@nist.gov
CWE ID: CWE-424
Type: Secondary
Source: cvd@cert.pl
CWE ID: NVD-CWE-Other
Type: Primary
Source: nvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://cert.pl/en/posts/2024/04/CVE-2024-3459cvd@cert.pl
Broken Link
Third Party Advisory
https://cert.pl/posts/2024/04/CVE-2024-3459cvd@cert.pl
Broken Link
Third Party Advisory
https://www.kioware.com/cvd@cert.pl
Product
https://cert.pl/en/posts/2024/04/CVE-2024-3459af854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
https://cert.pl/posts/2024/04/CVE-2024-3459af854a3a-2127-422b-91ae-364da2661108
Broken Link
Third Party Advisory
https://www.kioware.com/af854a3a-2127-422b-91ae-364da2661108
Product
Hyperlink: https://cert.pl/en/posts/2024/04/CVE-2024-3459
Source: cvd@cert.pl
Resource:
Broken Link
Third Party Advisory
Hyperlink: https://cert.pl/posts/2024/04/CVE-2024-3459
Source: cvd@cert.pl
Resource:
Broken Link
Third Party Advisory
Hyperlink: https://www.kioware.com/
Source: cvd@cert.pl
Resource:
Product
Hyperlink: https://cert.pl/en/posts/2024/04/CVE-2024-3459
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Third Party Advisory
Hyperlink: https://cert.pl/posts/2024/04/CVE-2024-3459
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Broken Link
Third Party Advisory
Hyperlink: https://www.kioware.com/
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Product
Change History
0Changes found

Details not found