cvedb.io
CVE-2024-6364
MEDIUM · CVSS 6.4
EPSS exploitation probability: 0%
Published 2025-05-13T17:15:50.850 · Last modified 2026-06-17T08:17:51.610

Summary

A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device. To remediate this vulnerability, update the device firmware to the latest available version. Please contact the device manufacturer for upgrade instructions or contact Absolute Security, see reference below.

Affected products

absolute — persistence

Does this affect you?

Add your gear to cvedb and we'll alert you only when absolute ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.