CVE-2022-24961
highpriority · track · 40EPSS 0.016 · 76 %ileDEEUUSEPSS · scored 2026-10-26
In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- SCA-2025-0009Vulnerabilities affecting SICK TDC-E210GC2025-08-01csaf · sick_psirtDE
SICK has identified multiple vulnerabilities in the SICK TDC-E210GC product. The advisory includes a total of 23 vulnerabilities, of which 14 are confirmed as affected and 9 as known not affected. At this time, SICK is not aware of any public exploits specifically targeting these vulnerabilities. Customers are strongly advised to apply the recommended workaround for the affected vulnerabilities to reduce potential risk.
- SCA-2025-0011Vulnerabilities affecting Endress+Hauser SSG-E210GC2025-10-02csaf · sick_psirtDE
Several vulnerabilities in the Endress+Hauser SSG-E210GC product were discoverd. The advisory includes a total of 23 vulnerabilities, of which 14 are confirmed as affected and 9 as known not affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (14)
External citations — patches, advisories, analysis.
- https://github.com/portainer/agent/compare/2.11.0...2.11.1cnnvd
- https://github.com/portainer/agent/pull/225/commits/a66977c76043fcff4a8f69c4b65988272d27c01fcnnvd
- https://github.com/portainer/portainerPatchcnnvd
- https://github.com/portainer/portainer/issues/6420cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2022-24961cnnvd
- https://www.portainer.io/blog/should-you-expose-portainer-or-agent-to-the-internetcnnvd
- https://github.com/portainer/agent/compare/2.11.0...2.11.1enisa_euvd
- https://github.com/portainer/agent/pull/225/commits/a66977c76043fcff4a8f69c4b65988272d27c01fenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan