PT-2024-4419
CVE-2024-5404
·
تاريخ النشر
2024-05-27
·
تاريخ التحديث
2024-06-07
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
moneo appliance (affected versions not specified)
IFM QHA300 (affected versions not specified)
IFM QHA210 (affected versions not specified)
IFM QVA200 (affected versions not specified)
Description
An unauthenticated remote attacker can change the admin password in a moneo appliance due to a weak password recovery mechanism. The vulnerability is related to the "Forgot Password" function of the IIoT platform.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾