Detections
Analytics

Progress Telerik UI for WPF 2024.4.1213 (CVE-2024-10095)

critical Nessus Plugin ID 213244

Synopsis

The remote host is missing a security update.

Description

The version of Progress Telerik UI for WPF installed on the remote host is prior to 2024.4.1213. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10095 advisory.

 - In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability. (CVE-2024-10095)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to Progress Telerik UI for WPF version 2024.4.1213 or later.

See Also

http://www.nessus.org/u?9a059ae8

Plugin Details

Severity: Critical

ID: 213244

File Name: telerik_ui_for_wpf_CVE-2024-10095.nasl

Version: 1.2

Type: local

Agent: windows

Family: Windows

Published: 12/19/2024

Updated: 12/20/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2024-10095

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: x-cpe:/a:telerik:ui_for_wpf

Required KB Items: installed_sw/Progress Telerik UI for WPF, SMB/Registry/Enumerated

Exploit Ease: No known exploits are available

Patch Publication Date: 12/16/2024

Vulnerability Publication Date: 12/16/2024

Reference Information

CVE: CVE-2024-10095