CVE-2024-39220

MEDIUM

6.5

Descricao

BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, AV-02FDR, AV-03D, AV-03BD, AV-04AFD, AV-04ASD, AV-04FD, AV-04SD, AV-05FD, AV-05SD, AA-07BD, AA-07BDI, BA-04BD, BA-04MD, BA-08BD, BA-08MD, BA-12BD, BA-12MD, CR-02BD before firmware v3.9.2 allows authenticated attackers to read SIP account passwords via a crafted GET request.

Detalhes CVE

Pontuacao CVSS v3.16.5

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosHIGH

Interacao do usuarioNONE

Publicado7/3/2024

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-256

Referencias

https://bas-ip.com/bsa-000001(cve@mitre.org)

https://github.com/DrieVlad/BAS-IP-vulnerabilities(cve@mitre.org)

https://bas-ip.com/bsa-000001(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/DrieVlad/BAS-IP-vulnerabilities(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.