CVE-2024-28878criticalCWE-494

CVE-2024-28878: critical vulnerability in IOSiX IO-1020 Micro ELD

IOSIX IO-1020 Micro ELD Download of Code Without Integrity Check

Published · Updated

Follow this CVE+ Monitor IO-1020 Micro ELD

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.6epss 0.3%
IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
IOSiX · IO-1020 Micro ELD
Related CVEs — IOSiX IO-1020 Micro ELD

In the same product, most dangerous first.

CVE-2024-31069HIGHIOSIX IO-1020 Micro ELD Use of Default CredentialsEPSS 0.4%CVE-2024-30210HIGHIOSIX IO-1020 Micro ELD Use of Default CredentialsEPSS 0.3%