Products
Factorio
- before 1.1.101
Source
cve@mitre.org
Tags
CVE-2024-39840 details
Published : June 29, 2024, 5:15 p.m.
Last Modified : June 29, 2024, 5:15 p.m.
Last Modified : June 29, 2024, 5:15 p.m.
Description
Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://memorycorruption.net/posts/rce-lua-factorio/ | cve@mitre.org |
| https://news.ycombinator.com/item?id=40830005 | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.