CVE-2024-8878: critical vulnerability in Riello Netman 204
Unauthenticated Password Reset
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 10epss 1.3%
The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
Riello · Netman 204public PoCs found — 1
cve_referencecyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Riello Netman 204
In the same product, most dangerous first.