CVE-2024-6364
Medium
Description
A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device. To remediate this vulnerability, update the device firmware to the latest available version. Please contact the device manufacturer for upgrade instructions or contact Absolute Security, see reference below.
SeverityMedium
CVSS6.4
Exploit probability—
ProductAbsolute Persistence
PublishedMay 13, 2025
First seenMay 13, 2025
Weakness typeCWE-284Improper access control
How to fix
Update
- absolute persistence2.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| absolute persistence | v < 2.8 | 2.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.