What is CVE-2024-6364?

CVE-2024-6364 is a medium-severity vulnerability in Absolute Persistence, classified under Improper Access Control. CVSS score: 6.4/10. Published 2025-05-13.

How severe is CVE-2024-6364?

Medium severity. CVSS v3 base score is 6.4 out of 10.

Vulnerability in Absolute Persistence

CVE-2024-6364

A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the devic…

EPSS: 0.002 (4.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Absolute Persistence
Absolute Security Persistence — versions 0

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

SecurityResponse@netmotionsoftware.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-6364?: CVE-2024-6364 is a medium-severity vulnerability in Absolute Persistence, classified under Improper Access Control. CVSS score: 6.4/10. Published 2025-05-13.
How severe is CVE-2024-6364?: Medium severity. CVSS v3 base score is 6.4 out of 10.