CVE-2024-33368
CVE-2024-33368 is a critical remote code execution vulnerability in Plasmoapp RPShare Fabric mod v.1.0.0. A remote attacker can exploit the vulnerability by injecting malicious code through the build method in DonwloadPromptScreen. This code execution can lead to complete system compromise. While the CVSS score is 0, SOCRadar's Vulnerability Risk Score (SVRS) is 30, indicating a moderate level of risk and potential for exploitation. This vulnerability allows for arbitrary code execution, meaning an attacker could potentially install malware, steal sensitive data, or take control of the affected system. Immediate patching is recommended to mitigate the risks associated with this flaw. The presence of the "In The Wild" tag indicates that this vulnerability is already being actively exploited, making patching a critical priority.
Description
CVE-2024-33368 is a critical vulnerability in Plasmoapp RPShare Fabric mod v.1.0.0 that allows a remote attacker to execute arbitrary code via the build method in DonwloadPromptScreen. This vulnerability has a CVSS score of 8.8, indicating its high severity. However, the SOCRadar Vulnerability Risk Score (SVRS) is only 38, suggesting that the vulnerability is not as critical as the CVSS score indicates. This discrepancy is likely due to the fact that the SVRS takes into account additional factors, such as social media activity, news reports, and dark web data, which may not be reflected in the CVSS score.
Key Insights
- This vulnerability is critical and could allow an attacker to take complete control of an affected system.
- The vulnerability is not yet being actively exploited in the wild, but it is likely that attackers will develop exploits for it soon.
- The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about this vulnerability, calling for immediate and necessary measures to be taken.
Mitigation Strategies
- Update to the latest version of Plasmoapp RPShare Fabric mod (v.1.0.1 or later).
- Disable the build method in DonwloadPromptScreen.
- Implement a web application firewall (WAF) to block malicious requests.
- Monitor your systems for suspicious activity and take appropriate action if necessary.
Additional Information
If you have any additional questions about this incident, you can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.