60
CVE-2024-41637
- CVSS 3.1
- 8.3 high
- EPSS
- <1%p55
- Published
- ·
- Modified
Description · NVD
RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also possesses Sudo privileges to execute several critical commands without a password.
- Weakness
- CWE-77
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L