CVE-2024-32754

LOW

3.1

Descripcion

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information.

Detalles CVE

Puntuacion CVSS v3.13.1

SeveridadLOW

Vector CVSSCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Vector de ataqueADJACENT_NETWORK

ComplejidadHIGH

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado7/4/2024

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-200

Referencias

https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-01(productsecurity@jci.com)

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories(productsecurity@jci.com)

https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-01(af854a3a-2127-422b-91ae-364da2661108)

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.