[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTVGyBy8lofhmLpxmzSOZPZZiY62vaRIk3UK4JreYulw":3,"g5a-risk:CVE-2024-12754":96},{"success":4,"data":5,"meta":93},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":28,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":40,"references":41,"referencesCount":40,"weaknesses":47,"weaknessesCount":40,"isActivelyExploited":56,"cisaInfo":28,"otxData":28,"relatedBlogPosts":57,"seoMetadata":58,"configurations":83,"relatedVendorCves":91,"notableEvents":92},"CVE-2024-12754","What is CVE-2024-12754?","AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the handling of background images. By creating a junction, an attacker can abuse the service to read arbitrary files. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-23940.","AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installa...","2024-12-30T17:15:07.127","2025-08-14T18:46:10.36",5.5,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":31,"CVSSMetricV40":28},[],[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":29,"ImpactScore":30},"zdi-disclosures@trendmicro.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[],0.01181,[32,32,32,32,32,32,32],"Medium",[36],{"vendor":37,"product":37,"version":38,"criteria":39,"vulnerable":4},"anydesk","8.0.9","cpe:2.3:a:anydesk:anydesk:8.0.9:*:*:*:*:windows:*:*",1,[42],{"url":43,"source":44,"tags":45},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1711\u002F","Zerodayinitiative",[46],"Third Party Advisory",[48],{"id":49,"name":50,"description":51,"extendedDescription":52,"status":53,"abstraction":54,"structure":55},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",false,[],{"title":59,"metaDescription":60,"keywords":61,"canonicalUrl":62,"structuredData":63},"What is CVE-2024-12754? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-12754, a medium severity cyber security vulnerability from 2024. AnyDesk Link Following Information Disclosure Vulnerabili...","CVE-2024-12754, CVE-2024-12754 vulnerability, CVE-2024-12754 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, anydesk security, anydesk vulnerability","\u002Fwhat-is\u002Fcve-2024-12754",{"@context":64,"@type":65,"headline":59,"description":60,"datePublished":10,"dateModified":11,"author":66,"publisher":70,"about":74,"mainEntityOfPage":78,"articleSection":81,"keywords":82},"https:\u002F\u002Fschema.org","TechArticle",{"@type":67,"name":68,"url":69},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":67,"name":68,"url":69,"logo":71},{"@type":72,"url":73},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":75,"name":6,"description":76,"additionalType":77},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":79,"@id":80},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-12754","Cybersecurity","CVE-2024-12754, CVE-2024-12754 vulnerability, CVE-2024-12754 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[84],{"Operator":28,"Negate":28,"Nodes":85},[86],{"Operator":87,"Negate":56,"CPEMatch":88},"OR",[89],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":90,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CA257560-5E79-445F-8981-ABB95257E30E",[],[],{"lastModified":11,"cacheTime":94,"version":95},1792361931155,"2.0",{"score":97,"band":98,"action":99,"scoredAt":100},19,"Info","Track","2026-10-16T07:05:07.783659+00:00"]