← back
CVE-2024-33898

CVE-2024-33898

CVSS 9.8 CRITICALEPSS 0.7%CWE-284
Axiros AXESS Auto Configuration Server (ACS) 4.x and 5.0.0 is affected by an Incorrect Access Control vulnerability. An authorization bypass allows remote attackers to achieve unauthenticated remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.axiros.com/2024/03/vulnerability-in-axusermanagerhttps://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-002