CVE-2024-46084 is a remote code execution vulnerability affecting Scriptcase version 9.10.023 and earlier. The vulnerability exists in the nm_unzip function, which can be exploited by an attacker with low privileges and requiring user interaction to execute arbitrary code remotely. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction needed, unchanged scope, and high impact on confidentiality, integrity, and availability. No official patch or vendor advisory is provided in the available data.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code remotely on affected Scriptcase installations, potentially leading to full system compromise, data theft, or service disruption. The vulnerability impacts confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. In the meantime, limit exposure by restricting access to the affected service and avoid executing untrusted inputs that may trigger the nm_unzip function.