CVE-2024-6206 HIGH

CVE-2024-6206

Vendor Hewlett Packard Enterprise (Hpe)
Product HPE Athonet Mobile Core
Published June 25, 2024
Last update August 8, 2024

CVSS base score

7.5/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A security vulnerability has been identified in HPE Athonet Mobile Core software. The core application contains a code injection vulnerability where a threat actor could execute arbitrary commands with the privilege of the underlying container leading to complete takeover of the target system.

Key dates

02Disclosure timeline

June 25, 2024 CVE published
August 8, 2024 Record updated