CVE-2024-4225

NGDIN_ST v2.0D.0062 - Multiple Vulnerabilities

CVSS 7.6 HIGHEPSS 0.3%CWE-284

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.6EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

30 abr 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Produtos afetados

DPS Telecom · NetGuardian DIN Remote Telemetry Unit (RTU)

Referências

https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html