CVE-2024-42013
Medium
Description
In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. An attacker with Windows administrative or debugging privileges can patch a binary in memory or on disk to bypass the password login requirement and gain full access to all functions of the program.
SeverityMedium
CVSS6.4
Exploit probability—
ProductBlocky-Gui
PublishedJan 22, 2025
First seenJan 22, 2025
Weakness typeCWE-863Incorrect authorization
How to fix
Update
- GRAU DATA Blocky-Gui3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GRAU DATA Blocky-Gui | No range specified | 3.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.