CVE-2024-47935 Details
Description
Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the victim’s device. The attacker needs to hijack the DLL file in advance. This issue affects StellarProtect (Legacy Mode): before 3.2; StellarEnforce: before 3.2; Safe Lock: from 3.0.0 before 3.1.1076. *Note: StellarProtect (Legacy Mode) is the new name for StellarEnforce, they are the same product.
A vulnerability allowing privilege escalation has been identified in TXOne Networks StellarProtect (Legacy Mode) versions prior to 3.2, StellarEnforce versions prior to 3.2, and Safe Lock versions from 3.0.0 prior to 3.1.1076. This issue arises from improper validation of integrity check values, which could enable an attacker to hijack a DLL file and escalate privileges on the affected device.
Users can upgrade to TXOne Networks StellarProtect (Legacy Mode) or StellarEnforce version 3.2.1169, or Safe Lock version 3.1.1076 to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Feb 17, 2025CISA-ADP
Assessed Feb 18, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.txone.com/psirt/advisories/cve-2024-47935/ | TXOne | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-354 | Improper Validation of Integrity Check Value | TXOne |
Affected Products
| Product | Versions |
|---|---|
| TXOne Networks StellarProtect | All versions |
CPE
Remediation
| |
| TXOne Networks StellarEnforce | All versions |
CPE
Remediation
| |
| TXOne Networks Safe Lock | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | TXOne |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 17, 2025 | New CVE Received | TXOne |