CVE-2024-6788

Critical

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the…

CERTVDE·CWE-1392·Published 2024-08-13

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

202 chars

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password.

NVDen

202 chars

NVDes

253 chars

Un atacante remoto no autenticado puede utilizar la función de actualización de firmware en la interfaz LAN del dispositivo para restablecer la contraseña de la "aplicación de usuario" predefinida y con pocos privilegios a la contraseña predeterminada.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	8.6	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H