CVE-2024-6618 — Path Traversal in Ocean Data Systems Dream Report

CVE-2024-6618

Path Traversal in Ocean Data Systems Dream Report PUBLISHED

Description (CNA)

In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library (DLL).

Affected (CNA)

Vendor / product	Versions
Ocean Data Systems / Dream Report 2023	affected 0 through 23.0.17795.1010
AVEVA / Reports for Operations	affected 23.0.17795.1010

CWE

CWE-22

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-08

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.