cveboard RSS feed

CVE-2024-40895

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the executable file path is set to a batch file (.bat) or command file (.cmd) extension.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

FFRI AMC

Vendor
FFRI Security, Inc.
Product
FFRI AMC
Platforms
Unknown
Default status
Unknown
FFRI AMC · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.4.0 to 3.5.3affectedUnavailableUnavailableUnavailableNone listed

FFRI AMC for ActSecure χ

Vendor
NEC Corporation
Product
FFRI AMC for ActSecure χ
Platforms
Unknown
Default status
Unknown
FFRI AMC for ActSecure χ · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.4.0 to 3.5.3affectedUnavailableUnavailableUnavailableNone listed

EDR Plus Pack

Vendor
Sky Co., Ltd.
Product
EDR Plus Pack
Platforms
Unknown
Default status
Unknown
EDR Plus Pack · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
Bundled FFRI AMC versions 3.4.0 to 3.5.3affectedUnavailableUnavailableUnavailableNone listed