← Voltar para CVEs
CVE-2024-37183
MEDIUM5.7
Descricao
Plain text credentials and session ID can be captured with a network sniffer.
Detalhes CVE
Pontuacao CVSS v3.15.7
SeveridadeMEDIUM
Vetor CVSSCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vetor de ataqueADJACENT_NETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioREQUIRED
Publicado6/20/2024
Ultima modificacao7/30/2025
Fontenvd
Avistamentos honeypot0
Produtos afetados
westermo:l210-f2gwestermo:l210-f2g_firmware
Fraquezas (CWE)
CWE-319
Referencias
https://www.cisa.gov/news-events/ics-advisories/icsa-24-172-03(ics-cert@hq.dhs.gov)
https://www.cisa.gov/news-events/ics-advisories/icsa-24-172-03(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.