IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe service. A subsequent service or server restart will then run that binary with administrator privilege.
CVE-2024-51448
MEDIUMCVSS 6.7EG · not loaded
6.7CVSS
EchelonGraph verdictAssessment incompleteEchelonGraph's exploitation data could not be loaded just now — check CISA KEV before deciding.
- CVSS 6.7 — the severity on NVD's record
- CISA KEV status, EPSS and exploit evidence could not be loaded — this is not a finding that it is unexploited
CISA-KEV: Could not be loadedEPSS PROB: Could not be loadedCVSS: 6.7Exploit: Could not be loadedExposed services: —
Fix status could not be loaded just now — check the vendor's advisory; until a fix is applied, use a compensating control (WAF / firewall / segmentation).
Internet exposure
The internet-exposure footprint is temporarily unavailable — the KEV-Exposure radar's record for this CVE could not be loaded just now. That is not a finding of zero exposed services; please retry shortly.
- CVSS v3
- 6.7
- EchelonGraph score
- Could not be loadedEchelonGraph's own record for this CVE could not be loaded just now, so its score, EG Risk, SSVC decision, EPSS and CISA KEV status are not shown. This is not a rating and not a finding of no exploitation; the CVSS shown is from NVD's record.
- EG Score
- —EchelonGraph score could not be loaded
- EG Risk
- —EG Risk could not be loaded
- EPSS PROB
- —EPSS could not be loaded
- EPSS %ILE
- —EPSS could not be loaded
- KEV
- —KEV status could not be loaded — check CISA's catalog
Published
January 18, 2025
Last Modified
June 17, 2026
Advisory Details
Enriched advisory details are temporarily unavailable — they could not be loaded just now. That is not a sign that none exist; please retry shortly.
References (1)
- psirt@ushttps://www.ibm.com/support/pages/node/7177586Vendor Advisory
Vendor Advisories for CVE-2024-51448
Vendor advisories for this CVE are temporarily unavailable — the list could not be loaded just now. That is not a sign that none exist; please retry shortly.
Patches & affected packages
Patch, fixed-version, affected-package, CWE and exploit details are temporarily unavailable — they could not be loaded just now. That is not a sign that none exist; please retry shortly.
Related CVEs
Related CVEs are temporarily unavailable — the same-product, same-vendor and same-CWE lists could not be loaded just now. That is not a sign that none exist; please retry shortly.
Frequently asked(5)
What is CVE-2024-51448?
CVE-2024-51448 is a medium-severity vulnerability; its CVE record was published on January 18, 2025. IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate their privileges. All files in the install inherit the file permissions of the parent directory and therefore a non-privileged user can substitute any executable for the nssm.exe…
When was the CVE record for CVE-2024-51448 published?
The CVE record for CVE-2024-51448 was published on January 18, 2025. That is the record's publication date; the vulnerability itself may have been made public earlier. This page shows NVD's record, which carries a last-modified date of June 17, 2026.
Is CVE-2024-51448 actively exploited?
EchelonGraph could not load the exploitation data for CVE-2024-51448 just now — its CISA KEV status, EPSS probability and exploit evidence — so this page makes no claim either way. Check CISA's Known Exploited Vulnerabilities catalog before deciding how urgently to act.
What is the CVSS score of CVE-2024-51448?
CVE-2024-51448 has a CVSS base score of 6.7.
How do I remediate CVE-2024-51448?
EchelonGraph could not load the fix status for CVE-2024-51448 just now. Check the vendor's advisory for a fixed version; if none is published, restrict network exposure of the affected system or apply the vendor's mitigation until one is.
Dependency Blast Radius
Explore the affected products and dependency analysis for CVE-2024-51448
Is Your Infrastructure Affected by CVE-2024-51448?
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.