What is CVE-2024-39334?

CVE-2024-39334 is a medium-severity vulnerability in N/a, classified under Deserialization of Untrusted Data. CVSS score: 6.5/10. Published 2024-06-23.

How severe is CVE-2024-39334?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Deserialization in N/a

CVE-2024-39334

MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. (The server process is not affected.)

Vulnerability class: Insecure Deserialization

EPSS: 0.004 (28.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

cve@mitre.org

Frequently asked questions

What is CVE-2024-39334?: CVE-2024-39334 is a medium-severity vulnerability in N/a, classified under Deserialization of Untrusted Data. CVSS score: 6.5/10. Published 2024-06-23.
How severe is CVE-2024-39334?: Medium severity. CVSS v3 base score is 6.5 out of 10.