CVE-2024-33250

Published May 13, 2024 CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Description
An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a remote attacker to execute arbitrary code via a crafted request.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-30995 An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a remote attacker to execute arbitrary code via a crafted request.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00443}

epss

{'score': 0.00579}

Type Values Removed Values Added
First Time appeared Ossrs
Ossrs simple Realtime Server
Weaknesses CWE-918
CPEs cpe:2.3:a:ossrs:simple_realtime_server:*:*:*:*:*:*:*:*
Vendors & Products Ossrs
Ossrs simple Realtime Server
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Feb 13, 2025, 3:52 PM
Reserved
Apr 23, 2024, 12:00 AM
Status
Deferred
Published
May 14, 2024, 3:37 PM
Modified
Jun 17, 2026, 7:31 AM