CVE-2024-4225

NGDIN_ST v2.0D.0062 - Multiple Vulnerabilities

CVSS 7.6 HIGHEPSS 0.3%CWE-284

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.6EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

30 Apr 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Affected products

DPS Telecom · NetGuardian DIN Remote Telemetry Unit (RTU)

References

https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html