CVE-2024-8058

EUVD-2024-49613
An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
lenovoCNA
7.6 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 21.65%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
lenovofilez
𝑥
< 9.8.6.0
CNA
Common Weakness Enumeration
References
https://www.filez.com/securityPolicy/1.html?1733849740