CVE-2024-55062
Published: 31 January 2025
Summary
CVE-2024-55062 is a critical-severity Command Injection (CWE-77) vulnerability in Easyvirt Co2Scope. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 10.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2024-55062 is a code injection vulnerability affecting EasyVirt DCScope versions up to and including 8.6.0 as well as CO2Scope versions up to and including 1.3.0. The flaw resides in the /api/license/sendlicense/ endpoint and is tracked under CWE-77, carrying a CVSS 3.1 base score of 9.8.
Remote unauthenticated attackers can send crafted requests to the endpoint and achieve arbitrary code execution on the affected server without any user interaction or credentials.
Public references consist of technical write-ups hosted on GitHub that document the issue and provide reproduction details; no vendor advisory or patch information is included in the available references.
The associated EPSS score rose from a low baseline to a peak of 0.0726 on 2026-03-12 before receding to its current value of 0.0496, indicating modest post-disclosure exploitation interest.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-52731
Vulnerability details
Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes a code injection vulnerability in a public-facing API endpoint (/api/license/sendlicense/) that allows remote unauthenticated arbitrary code execution, directly enabling exploitation of public-facing applications.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly requires validation of inputs at the /api/license/sendlicense/ endpoint to block malicious code injection payloads.
Mandates timely identification, reporting, and correction of the specific code injection flaw in EasyVirt DCScope and CO2Scope.
Enforces authentication and authorization for access to the vulnerable /api/license/sendlicense/ endpoint, blocking unauthenticated remote exploitation.