CVE-2024-8887: critical vulnerability in CIRCUTOR Q-SMT
Authentication bypass vulnerability on CIRCUTOR Q-SMT
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 0.6%
CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service (DoS) attack if an attacker with access to the web service bypasses the authentication mechanisms on the login page, allowing the attacker to use all the functionalities implemented at web level that allow interacting with the device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
CIRCUTOR · CIRCUTOR Q-SMTRelated CVEs — CIRCUTOR Q-SMT
In the same product, most dangerous first.
CVE-2024-8888CRITICALInsufficient Session Expiration vulnerability on CIRCUTOR Q-SMTEPSS 0.4%CVE-2024-8890HIGHInsertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMTEPSS 0.4%CVE-2024-8891MEDIUMExposure of Private Personal Information to an Unauthorized Actor vulnerability on CIRCUTOR Q-SMTEPSS 0.3%