Skip to content
OpenAdvisories
Critical · 9.2 CVE-2024-10035 EUVD-2024-32879GHSA-qjg4-p6j3-36x6

Code Injection in BG-TEK's CoslatV3

Published Nov 4, 2024 · Updated Jun 2, 2026 · Assigned by TR-CERT

Description

Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command ('Command Injection'), Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in BG-TEK Informatics Security Technologies CoslatV3 allows Command Injection, Privilege Escalation.

This issue affects CoslatV3: through 3.1069.

NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected products

VendorProductAffectedFixed
BG-TEK Informatics Security Technologies CoslatV3 ≤ 3.1069 —

References