← Zuruck zu CVEs

CVE-2024-31486

MEDIUM

5.3

Beschreibung

A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30). The affected devices stores MQTT client passwords without sufficient protection on the devices. An attacker with remote shell access or physical access could retrieve the credentials leading to confidentiality loss.

CVE Details

CVSS v3.1 Bewertung5.3

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorNETWORK

KomplexitatHIGH

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht5/14/2024

Zuletzt geandert11/3/2025

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-312

Referenzen

http://seclists.org/fulldisclosure/2024/Jul/4(productcert@siemens.com)

https://cert-portal.siemens.com/productcert/html/ssa-871704.html(productcert@siemens.com)

http://seclists.org/fulldisclosure/2024/Jul/4(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2025/Feb/19(af854a3a-2127-422b-91ae-364da2661108)

https://cert-portal.siemens.com/productcert/html/ssa-871704.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.