« Volver al listado

CVE-2024-26289

Estado: AnalizadaCrítica (9.8)—

Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Sigb — PMB

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-26289",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-26289",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-05-28T15:28:35.280065Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "affectedData": [
        {
          "vendor": "PMB Services",
          "product": "PMB",
          "versions": [
            {
              "status": "affected",
              "version": "7.5.1",
              "lessThan": "7.5.6-2",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "7.4.1",
              "lessThan": "7.4.9",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "7.3.1",
              "lessThan": "7.3.18",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:pmb_services:pmb:*:*:*:*:*:*:*:*"
          ],
          "vendor": "pmb_services",
          "product": "pmb",
          "versions": [
            {
              "status": "affected",
              "version": "7.5.1",
              "lessThan": "7.5.6-2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "7.4.1",
              "lessThan": "7.4.9",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "7.3.1",
              "lessThan": "7.3.18",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-05-27T07:15:08.807",
  "references": [
    {
      "url": "https://forge.sigb.net/projects/pmb/files",
      "tags": [
        "Product"
      ],
      "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"
    },
    {
      "url": "https://github.com/enisaeu/CNW/blob/main/advisories/2024/CNW-2024-A-12.md",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"
    },
    {
      "url": "https://forge.sigb.net/projects/pmb/files",
      "tags": [
        "Product"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/enisaeu/CNW/blob/main/advisories/2024/CNW-2024-A-12.md",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de deserialización de datos no confiables en PMB Services PMB  permite la inclusión remota de código. Este problema afecta a PMB: desde 7.5.1 anterior a 7.5.6-2, desde 7.4.1 anterior a 7.4.9, desde 7.3.1 anterior a 7.3.18."
    }
  ],
  "lastModified": "2026-06-17T07:17:32.883",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sigb:pmb:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1B8DE5B-25FD-4597-9593-CBA4D002C3EB",
              "versionEndExcluding": "7.3.18",
              "versionStartIncluding": "7.3.1"
            },
            {
              "criteria": "cpe:2.3:a:sigb:pmb:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD281040-EE29-4128-847E-D7AC0396B713",
              "versionEndExcluding": "7.4.9",
              "versionStartIncluding": "7.4.1"
            },
            {
              "criteria": "cpe:2.3:a:sigb:pmb:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC312B4B-5755-495F-A057-E9923865EF71",
              "versionEndExcluding": "7.5.6-2",
              "versionStartIncluding": "7.5.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"
}