← voltar
CVE-2024-33898

CVE-2024-33898

CVSS 9.8 CRITICALEPSS 0.7%CWE-284
Axiros AXESS Auto Configuration Server (ACS) 4.x and 5.0.0 is affected by an Incorrect Access Control vulnerability. An authorization bypass allows remote attackers to achieve unauthenticated remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.axiros.com/2024/03/vulnerability-in-axusermanagerhttps://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-002