CVE-2024-40895

6.4 mediumEPSS 0.5%

Medium (6.4). EPSS 0.5% chance of exploitation in the next 30 days.

FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the executable file path is set to a batch file (.bat) or command file (.cmd) extension.

Severity

CVSS 3.1

6.4 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2024-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://jvn.jp/en/jp/JVN26734798/
https://www.ffri.jp/assets/files/other_docs/20240729.pdf
https://www.skyseaclientview.net/news/240729_01/
https://www.support.nec.co.jp/View.aspx?id=3140109694
https://jvn.jp/en/jp/JVN26734798/

Check your stack JSON