CVE-2024-52052 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.2 HIGH	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
rapid7	CNA	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 46%

Vendor	Product	Version
wowza	streaming_engine	4.3.0 ≤ 𝑥 < 4.9.1

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-646 - Reliance on File Name or Extension of Externally-Supplied File
The software allows a file to be uploaded, but it relies on the file name or extension of the file to determine the appropriate behaviors. This could be used by attackers to cause the file to be misclassified and processed in a dangerous fashion.

References

https://www.rapid7.com/blog/post/2024/11/20/multiple-vulnerabilities-in-wowza-streaming-engine-fixed/

https://www.wowza.com/docs/wowza-streaming-engine-4-9-1-release-notes