CVE-2024-5404

Name of the Vulnerable Software and Affected Versions moneo appliance (affected versions not specified) IFM QHA300 (affected versions not specified) IFM QHA210 (affected versions not specified) IFM QVA200 (affected versions not specified)

Description An unauthenticated remote attacker can change the admin password in a moneo appliance due to a weak password recovery mechanism. The vulnerability is related to the "Forgot Password" function of the IIoT platform.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.