Lucene search
CyberDanubeVULNRICHMENT:CVE-2024-8878HistorySep 24, 2024 - 3:14 p.m.
CVE-2024-8878 Unauthenticated Password Reset
2024-09-2415:14:31
CWE-640
CyberDanube
github.com
14
cwe-862
unauthenticated access
admin account takeover
security vulnerability
CVSS4
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
39.6%
SSVC
Exploitation
poc
Automatable
yes
Technical Impact
total
The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.
ADP Affected
[
{
"cpes": [
"cpe:2.3:o:riello-ups:netman_204_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "riello-ups",
"product": "netman_204_firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "4.05"
}
],
"defaultStatus": "unknown"
}
]Related
cve
cve
CVE-2024-8878
2024-09-25 01:15:47
cvelist
cvelist
CVE-2024-8878 Unauthenticated Password Reset
2024-09-24 15:14:31
nvd
nvd
CVE-2024-8878
2024-09-25 01:15:47
packetstorm
packetstorm
Netman 204 4.05 SQL Injection / Unauthenticated Password Reset
2024-09-24 00:00:00
thn
thn
Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks
2024-09-30 11:55:00
CVSS4
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
39.6%
SSVC
Exploitation
poc
Automatable
yes
Technical Impact
total
Related for VULNRICHMENT:CVE-2024-8878