CVE-2024-29500

9.8

Critical

Published:10 Apr 2024

Last updated:17 Jun 2026

Source:cve@mitre.org

Analyzed

Weakness (CWE)

CWE-94Code Injection

CVSS Vector

v3.1

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

View on MITRE Find PoC on GitHub

Description

An issue in the kiosk mode of Secure Lockdown Multi Application Edition v2.00.219 allows attackers to execute arbitrary code via running a ClickOnce application instance.

References

cve@mitre.org

https://raeph123.github.io/BlogPosts/inteset/Inteset_Secure_Lockdown_Multi_Application_Edition_-_Vulnerabilities_and_Hardening_Measures_en.html

cve@mitre.org

https://www.drive-byte.de/en/blog/inteset-bugs-and-hardening

af854a3a-2127-422b-91ae-364da2661108

https://www.drive-byte.de/en/blog/inteset-bugs-and-hardening