Lucene search
HistoryJul 31, 2024 - 2:15 p.m.
CVE-2024-3082
cve-2024-3082
administrative account
physical access
cleartext
CVSS3
4.6
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
21.2%
A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext.
Affected configurations
Node
progessensor_net_connect_firmware_v2Match2.24
progessensor_net_connect_v2Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| proges | sensor_net_connect_firmware_v2 | 2.24 | cpe:2.3:o:proges:sensor_net_connect_firmware_v2:2.24:*:*:*:*:*:*:* |
| proges | sensor_net_connect_v2 | - | cpe:2.3:h:proges:sensor_net_connect_v2:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-3082
2024-07-31 14:15:07
vulnrichment
vulnrichment
CVE-2024-3082
2024-07-31 13:14:32
cvelist
cvelist
CVE-2024-3082
2024-07-31 13:14:32
CVSS3
4.6
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
21.2%
Related for NVD:CVE-2024-3082