CVE-2024-8887: falha crítica em CIRCUTOR Q-SMT
Authentication bypass vulnerability on CIRCUTOR Q-SMT
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 10epss 0.6%
CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service (DoS) attack if an attacker with access to the web service bypasses the authentication mechanisms on the login page, allowing the attacker to use all the functionalities implemented at web level that allow interacting with the device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
CIRCUTOR · CIRCUTOR Q-SMTCVEs relacionadas — CIRCUTOR Q-SMT
No mesmo produto, das mais perigosas para as menos.
CVE-2024-8888CRITICALInsufficient Session Expiration vulnerability on CIRCUTOR Q-SMTEPSS 0.4%CVE-2024-8890HIGHInsertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMTEPSS 0.4%CVE-2024-8891MEDIUMExposure of Private Personal Information to an Unauthorized Actor vulnerability on CIRCUTOR Q-SMTEPSS 0.3%