Vulnerability · Published Oct 3, 2024 · Assigned by OpenText
CVE-2024-7824Type-confusion vulnerability that can cause the WRSA.exe service to crash and generate a crash dump
Medium 6.3
In plain English
A medium-severity type confusion in SecureAnywhere - Web Shield from Webroot. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 2.0)6.3Medium
Exploit odds (30 days)0.4%top 63.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Webroot | SecureAnywhere - Web Shield | 0 – before 2.1.2.3 |
Weakness: CWE-843 · Vector: AV:L/AC:M/Au:N/C:C/I:N/A:C