CVE-2024-39771

Name of the Vulnerable Software and Affected Versions QBiC CLOUD CC-2L versions 1.1.30 and earlier Safie One versions 1.8.2 and earlier

Description The issue is related to improper certificate validation, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack.

Recommendations For QBiC CLOUD CC-2L versions 1.1.30 and earlier, update to a version that properly validates certificates. For Safie One versions 1.8.2 and earlier, update to a version that properly validates certificates. As a temporary workaround, consider restricting network access to minimize the risk of exploitation.