Every CVE Search/ Get API key

CVE-2007-4062

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6...

7.8 HighPublic exploit

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability.

Exploit likelihood

2.11%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability.

Record
CVE-2007-4062
CVSS 2.0
7.8 HighAV:N/AC:M/Au:N/C:N/I:P/A:C
Weakness
CWE-22
Updated
2026-11-02
CVE List No score

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability.

Record
CVE-2007-4062
Updated
2026-11-02
EUVDEUVD-2007-4046 No score

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability.

Record
EUVD-2007-4046
Updated
2026-11-03
GitHub AdvisoriesGHSA-cxp3-m897-wfvf No score

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6...

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability.

Record
GHSA-cxp3-m897-wfvf
Weakness
CWE-22
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBNessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution2007-07-27

History

History
RecordedChangedSources
aliasesEUVD
aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-4062 is a high vulnerability (CVSS 7.8) in Nessus Vulnerability Scanner, published July 30, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 81st percentile. No source names a fixed version.

References

MoveEnter Open