CVE-2024-41309

7.8 highEPSS 0.2%

High (7.8) in enjayworld enjay crm. EPSS 0.2% chance of exploitation in the next 30 days.

An issue in the Hardware info module of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and gain root-level privileges on the underlying system.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2024-08-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

enjayworld:enjay_crm

References

https://the-it-wonders.blogspot.com/2024/07/enjay-crm-10-multiple-code-executions.html

Check your stack JSON