Vulnerability in Txone Networks Safe Lock
CVE-2024-47935
Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance. This issue affects StellarProtect (Legacy Mode): before 3.2; StellarEnforce: before 3.2; Safe Lock: from 3.0.0 before 3.1.1076. *Note: StellarProtect (Legacy Mode) is the new name for StellarEnforce, they are the same product.
EPSS: 0.001 (0.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Txone Networks Safe Lock — versions 3.0.0
- Txone Networks Stellarenforce — versions 0
- Txone Networks Stellarprotect (Legacy Mode) — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-47935?
- CVE-2024-47935 is a medium-severity vulnerability in Txone Networks Safe Lock, classified under Improper Validation of Integrity Check Value. CVSS score: 6.7/10. Published 2025-02-17.
- How severe is CVE-2024-47935?
- Medium severity. CVSS v3 base score is 6.7 out of 10.
- Is CVE-2024-47935 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.