Cyber Resilience

CVE-2024-55062

CriticalPublic PoCRCE

Published: 31 January 2025

Published
31 January 2025
Modified
24 May 2025
KEV Added
Patch
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0496 89.9th percentile
Risk Priority 23 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-55062 is a critical-severity Command Injection (CWE-77) vulnerability in Easyvirt Co2Scope. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 10.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2024-55062 is a code injection vulnerability affecting EasyVirt DCScope versions up to and including 8.6.0 as well as CO2Scope versions up to and including 1.3.0. The flaw resides in the /api/license/sendlicense/ endpoint and is tracked under CWE-77, carrying a CVSS 3.1 base score of 9.8.

Remote unauthenticated attackers can send crafted requests to the endpoint and achieve arbitrary code execution on the affected server without any user interaction or credentials.

Public references consist of technical write-ups hosted on GitHub that document the issue and provide reproduction details; no vendor advisory or patch information is included in the available references.

The associated EPSS score rose from a low baseline to a peak of 0.0726 on 2026-03-12 before receding to its current value of 0.0496, indicating modest post-disclosure exploitation interest.

EU & UK References

Vulnerability details

Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Why these techniques?

The CVE describes a code injection vulnerability in a public-facing API endpoint (/api/license/sendlicense/) that allows remote unauthenticated arbitrary code execution, directly enabling exploitation of public-facing applications.

CVEs Like This One

CVE-2024-57587Same product: Easyvirt Co2Scope
CVE-2024-53356Same product: Easyvirt Co2Scope
CVE-2024-53357Same product: Easyvirt Co2Scope
CVE-2024-53355Same product: Easyvirt Co2Scope
CVE-2025-34267Shared CWE-77
CVE-2024-34166Shared CWE-77
CVE-2026-30461Shared CWE-77
CVE-2025-64093Shared CWE-77
CVE-2024-54660Shared CWE-77
CVE-2026-26093Shared CWE-77

Affected Assets

easyvirt
co2scope
≤ 1.3.0
easyvirt
dcscope
≤ 8.6.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly requires validation of inputs at the /api/license/sendlicense/ endpoint to block malicious code injection payloads.

prevent

Mandates timely identification, reporting, and correction of the specific code injection flaw in EasyVirt DCScope and CO2Scope.

prevent

Enforces authentication and authorization for access to the vulnerable /api/license/sendlicense/ endpoint, blocking unauthenticated remote exploitation.

References