SMART-HMI SECURITY ADVISORY
CVE-2024-8752 Aktualisiert 16.10.2026 06:13

Fix for CVE-2024-8752

Dieses Advisory wird aus CVE-2024-8752.md unter supplychain/advisories gerendert.

Permalink
Für dieses Advisory ist keine deutsche Übersetzung verfügbar. Es wird das englische Original angezeigt.
  • Release: Software Version 2.16.1
  • Severity: High
  • Release Date: 2025-02-11

We have released version 2.16.1 to address a security vulnerability, CVE-2024-8752, affecting versions 2.11.0 through 2.16.0.

How the Software is Affected

The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system. The vulnerability exists in the software's input validation mechanism. Under certain conditions, a remote attacker could exploit insufficiently validated input to execute unauthorized actions.

Recommended Action

We strongly recommend that all customers running affected versions upgrade to version 2.16.1 as soon as possible. No workaround is available.

For further details or assistance with the update, please contact our support team

We take security seriously and appreciate your cooperation in keeping your systems protected.

WebIQ Security Center
Aktion ausgeführt.