CyberSecBulletin

Veertu vulnerabilities

We track 3 vulnerabilities in Veertu products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2024.

3vulnerabilities
0critical
3high
0exploited
7.6average CVSS score

Latest Veertu vulnerabilities

  • 7.5 High severity

    Anka Build: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2024-41922VeertuEPSS 8.07%

    A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger

  • 7.5 High severity

    Anka Build: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2024-41163VeertuEPSS 52.5%

    A directory traversal vulnerability exists in the archive functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulner

  • 7.8 High severity

    Anka Build: Improper Ownership Management

    CVE-2024-39755Veertu

    A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0. A specially crafted PKG file can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability