CVE-2024-1149

5.5 mediumEPSS 0.1%

Medium (5.5) in snowsoftware snow inventory agent. EPSS 0.1% chance of exploitation in the next 30 days.

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0; Inventory Agent: through 6.14.5; Inventory Agent: through 6.7.2.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-347
Published: 2024-02-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

snowsoftware:snow_inventory_agent

References

https://community.snowsoftware.com/s/feed/0D5Td000004YtMcKAK
https://community.snowsoftware.com/s/feed/0D5Td000004YtMcKAK

Check your stack JSON