CVE-2024-27120

7.7 highEPSS 0.5%

High (7.7) in celsiusbenelux comfortkey. EPSS 0.5% chance of exploitation in the next 30 days.

A Local File Inclusion vulnerability has been found in ComfortKey, a product of Celsius Benelux. Using this vulnerability, an unauthenticated attacker may retrieve sensitive information about the underlying system. The vulnerability has been remediated in version 24.1.2.

Severity

CVSS 4.0

7.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/S:P/AU:Y/R:U/V:C/RE:M/U:Red

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-200
Published: 2024-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

celsiusbenelux:comfortkey

References

https://csirt.divd.nl/CVE-2024-27120
https://csirt.divd.nl/DIVD-2024-00031/

Check your stack JSON