Vulnerability in Avid Nexis E-Series
CVE-2024-26293
The Avid Nexis Agent uses a vulnerable gSOAP version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.
Published · last modified .
EPSS exploit prediction
EPSS: 0.004 (27.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 28th percentile — 27.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: +0.000
Affected products
- Avid Nexis E-Series — versions 0
- Avid Nexis F-Series — versions 0
- Avid Nexis Pro+ — versions 0
- Avid System Director Appliance (Sda+) — versions 0
Weakness classification (CWE)
References
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (vendor-advisory)
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (technical-description, third-party-advisory)
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (third-party-advisory)