CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2024-6911Public Exploit

ProcessPlus - Arbitrary File Read (CVE-2024-6911)

PublishedJul 22, 2024
First SeenN/A
Last Seen
Reported
CVSS8.7
PerkinElmer
PerkinElmerProcessPlus
enterprise_softwarewindows

Description

Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus: through 1.11.6507.0.

psychologyCrowdSec Analysis

CVE-2024-6911 is a high-severity vulnerability in PerkinElmer ProcessPlus through version 1.11.6507.0 that allows unauthenticated attackers to read arbitrary files on the Windows system via a local file inclusion flaw. This exposure could enable external parties to access sensitive information, potentially leading to data breaches or further system compromise.

CrowdSec has been tracking this vulnerability and its exploits since 11th of February 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2024-6911 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers exploit this vulnerability by sending requests to URLs containing /ProcessPlus/Log/Download/ with a filename parameter set to Windows file paths (e.g., ..\..\..\..\..\..\Windows\win.ini) to perform local file inclusion and access sensitive files.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2024-07-22
Rule Released2026-02-11

Related Weaknesses

CWE-552: Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References