CVE-2024-40895: Ffri Amc

Medium severity, CVSS 6.4. EPSS: 0.5% chance of exploitation in the next 30 days.

FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an environment where the notification program setting is enabled and the executable file path is set to a batch file (.bat) or command file (.cmd) extension.

Affected products

• Ffri Ffri Amc: from 3.4.0, before 3.5.3 (fixed in 3.5.3)
• Ffri Security, Inc Ffri Amc
• Nec Corporation Ffri Amc For Actsecure Χ
• Sky Co., Ltd Edr Plus Pack
• Skygroup Edr Plus Pack: from 3.4.0, before 3.5.3 (fixed in 3.5.3)
• Skygroup Edr Plus Pack Cloud: from 3.4.0, before 3.5.3 (fixed in 3.5.3)

Published 2024-07-30. Last modified 2026-06-17.