Common Weakness Enumeration

CWE-288

Allowed

Authentication Bypass Using an Alternate Path or Channel

Abstraction: Base · Status: Incomplete

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

1207 vulnerabilities reference this CWE, most recent first.

CVE-2024-49604 (GCVE-0-2024-49604)

Vulnerability from cvelistv5 – Published: 2024-10-20 07:56 – Updated: 2026-04-28 16:10

Title

WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability

Summary

Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through <= 6.7.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-21 16:10 UTC

CWE

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

Patchstack mitre root

References

1 reference

URL	Tags
https://patchstack.com/database/Wordpress/Plugin/…	vdb-entry

Impacted products

2 products

Vendor	Product	Version
N-Media	Simple User Registration	Affected: 0 , ≤ 6.7 (custom)
najeeb_ahmad	simple_user_registration	Affected: 0 , ≤ 5.5 (custom) cpe:2.3:a:najeeb_ahmad:simple_user_registration::::::::

Date Public

2026-04-01 16:28

Credits

stealthcopter | Patchstack Bug Bounty Program

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:najeeb_ahmad:simple_user_registration:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simple_user_registration",
            "vendor": "najeeb_ahmad",
            "versions": [
              {
                "lessThanOrEqual": "5.5",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-49604",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-21T16:10:36.387594Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-21T16:11:38.694Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "wp-registration",
          "product": "Simple User Registration",
          "vendor": "N-Media",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.8",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "6.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "stealthcopter | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-04-01T16:28:16.563Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.\u003cp\u003eThis issue affects Simple User Registration: from n/a through \u003c= 6.7.\u003c/p\u003e"
            }
          ],
          "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through \u003c= 6.7."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-28T16:10:25.561Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/Wordpress/Plugin/wp-registration/vulnerability/wordpress-simple-user-registration-plugin-5-5-account-takeover-vulnerability?_s_id=cve"
        }
      ],
      "title": "WordPress Simple User Registration plugin \u003c= 6.7 - Broken Authentication vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2024-49604",
    "datePublished": "2024-10-20T07:56:32.685Z",
    "dateReserved": "2024-10-17T09:51:09.446Z",
    "dateUpdated": "2026-04-28T16:10:25.561Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-49328 (GCVE-0-2024-49328)

Vulnerability from cvelistv5 – Published: 2024-10-20 07:58 – Updated: 2026-04-28 16:10

Title

WordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability

Summary

Authentication Bypass Using an Alternate Path or Channel vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through <= 1.0.0.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-21 16:09 UTC

CWE

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

Patchstack mitre root

References

1 reference

URL	Tags
https://patchstack.com/database/Wordpress/Plugin/…	vdb-entry

Impacted products

2 products

Vendor	Product	Version
vivek2tamrakar	WP REST API FNS	Affected: 0 , ≤ 1.0.0 (custom)
vivek_tamrakar	wp_rest_api_fns	Affected: 0 , ≤ 1.0.0 (custom) cpe:2.3:a:vivek_tamrakar:wp_rest_api_fns::::::::

Date Public

2026-04-01 16:28

Credits

stealthcopter | Patchstack Bug Bounty Program

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:vivek_tamrakar:wp_rest_api_fns:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "wp_rest_api_fns",
            "vendor": "vivek_tamrakar",
            "versions": [
              {
                "lessThanOrEqual": "1.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-49328",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-21T16:09:40.194461Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-21T16:10:18.608Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "rest-api-fns",
          "product": "WP REST API FNS",
          "vendor": "vivek2tamrakar",
          "versions": [
            {
              "lessThanOrEqual": "1.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "stealthcopter | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-04-01T16:28:14.472Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Authentication Bypass.\u003cp\u003eThis issue affects WP REST API FNS: from n/a through \u003c= 1.0.0.\u003c/p\u003e"
            }
          ],
          "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through \u003c= 1.0.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-28T16:10:25.369Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/Wordpress/Plugin/rest-api-fns/vulnerability/wordpress-wp-rest-api-fns-plugin-plugin-1-0-0-account-takeover-vulnerability?_s_id=cve"
        }
      ],
      "title": "WordPress WP REST API FNS Plugin plugin \u003c= 1.0.0 - Account Takeover vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2024-49328",
    "datePublished": "2024-10-20T07:58:15.308Z",
    "dateReserved": "2024-10-14T10:40:38.484Z",
    "dateUpdated": "2026-04-28T16:10:25.369Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-49247 (GCVE-0-2024-49247)

Vulnerability from cvelistv5 – Published: 2024-10-16 12:31 – Updated: 2026-04-29 09:51

Title

WordPress BuddyPress Better Registration plugin <= 1.6 - Broken Authentication vulnerability

Summary

Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-registration allows Authentication Bypass.This issue affects BuddyPress Better Registration: from n/a through <= 1.6.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-16 15:21 UTC

CWE

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

Patchstack mitre root

References

1 reference

URL	Tags
https://patchstack.com/database/Wordpress/Plugin/…	vdb-entry

Impacted products

2 products

Vendor	Product	Version
SK	BuddyPress Better Registration	Affected: 0 , ≤ 1.6 (custom)
oc2ps	better-bp-registration	Affected: 0 , ≤ 1.6 (custom) cpe:2.3:a:oc2ps:better-bp-registration::::::::

Date Public

2026-04-01 16:28

Credits

stealthcopter | Patchstack Bug Bounty Program

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:oc2ps:better-bp-registration:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "better-bp-registration",
            "vendor": "oc2ps",
            "versions": [
              {
                "lessThanOrEqual": "1.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-49247",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-16T15:21:12.781946Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-16T15:26:17.081Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "better-bp-registration",
          "product": "BuddyPress Better Registration",
          "vendor": "SK",
          "versions": [
            {
              "lessThanOrEqual": "1.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "stealthcopter | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-04-01T16:28:02.277Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-registration allows Authentication Bypass.\u003cp\u003eThis issue affects BuddyPress Better Registration: from n/a through \u003c= 1.6.\u003c/p\u003e"
            }
          ],
          "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-registration allows Authentication Bypass.This issue affects BuddyPress Better Registration: from n/a through \u003c= 1.6."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-29T09:51:53.348Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/Wordpress/Plugin/better-bp-registration/vulnerability/wordpress-buddypress-better-registration-plugin-1-6-broken-authentication-vulnerability?_s_id=cve"
        }
      ],
      "title": "WordPress BuddyPress Better Registration plugin \u003c= 1.6 - Broken Authentication vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2024-49247",
    "datePublished": "2024-10-16T12:31:02.405Z",
    "dateReserved": "2024-10-14T10:39:26.354Z",
    "dateUpdated": "2026-04-29T09:51:53.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47574 (GCVE-0-2024-47574)

Vulnerability from cvelistv5 – Published: 2024-11-13 11:15 – Updated: 2024-11-13 14:43

Summary

A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-13 14:40 UTC

CWE

CWE-288 - Improper access control

Assigner

fortinet mitre root

References

1 reference

URL	Tags
https://fortiguard.fortinet.com/psirt/FG-IR-24-199

Impacted products

2 products

Vendor	Product	Version
Fortinet	FortiClientWindows	Affected: 7.4.0 Affected: 7.2.0 , ≤ 7.2.4 (semver) Affected: 7.0.0 , ≤ 7.0.12 (semver) Affected: 6.4.0 , ≤ 6.4.10 (semver)
fortinet	forticlientwindows	Affected: 7.4.0 Affected: 7.2.0 , ≤ 7.2.4 (semver) Affected: 7.0.0 , ≤ 7.0.12 (semver) Affected: 6.4.0 , ≤ 6.4.10 (semver) cpe:2.3:a:fortinet:forticlientwindows::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:fortinet:forticlientwindows:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "forticlientwindows",
            "vendor": "fortinet",
            "versions": [
              {
                "status": "affected",
                "version": "7.4.0"
              },
              {
                "lessThanOrEqual": "7.2.4",
                "status": "affected",
                "version": "7.2.0",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "7.0.12",
                "status": "affected",
                "version": "7.0.0",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "6.4.10",
                "status": "affected",
                "version": "6.4.0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47574",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-13T14:40:12.257561Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-13T14:43:08.240Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [],
          "defaultStatus": "unaffected",
          "product": "FortiClientWindows",
          "vendor": "Fortinet",
          "versions": [
            {
              "status": "affected",
              "version": "7.4.0"
            },
            {
              "lessThanOrEqual": "7.2.4",
              "status": "affected",
              "version": "7.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.12",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.10",
              "status": "affected",
              "version": "6.4.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "Improper access control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-13T11:15:04.046Z",
        "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
        "shortName": "fortinet"
      },
      "references": [
        {
          "name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-199",
          "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-199"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Please upgrade to FortiClientWindows version 7.4.1 or above \nPlease upgrade to FortiClientWindows version 7.2.5 or above \nPlease upgrade to FortiClientWindows version 7.0.13 or above"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
    "assignerShortName": "fortinet",
    "cveId": "CVE-2024-47574",
    "datePublished": "2024-11-13T11:15:04.046Z",
    "dateReserved": "2024-09-27T16:19:24.136Z",
    "dateUpdated": "2024-11-13T14:43:08.240Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-47406 (GCVE-0-2024-47406)

Vulnerability from cvelistv5 – Published: 2024-10-25 06:18 – Updated: 2024-10-25 18:38

Summary

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-25 18:33 UTC

CWE

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

jpcert jpcert root

References

3 references

URL	Tags
https://jvn.jp/en/vu/JVNVU95063136/
https://global.sharp/products/copier/info/info_se…
https://www.toshibatec.com/information/20241025_01.html

Impacted products

28 products

Vendor	Product	Version
Sharp Corporation	Sharp Digital Full-color MFPs and Monochrome MFPs	Affected: see the information provided by Sharp Corporation
Toshiba Tec Corporation	e-STUDIO 908	Affected: T2.12.h3.00 and earlier versions
Toshiba Tec Corporation	e-STUDIO 1058	Affected: T1.01.h4.00 and earlier versions
Toshiba Tec Corporation	e-STUDIO 1208	Affected: T1.01.h4.00 and earlier versions
sharp	bp-90c80_firmware	Affected: 0 , ≤ 210 (custom) cpe:2.3:o:sharp:bp-90c70_firmware:::::::: cpe:2.3:o:sharp:bp-90c80_firmware::::::::
sharp	bp-70c65_firmware	Affected: 0 , ≤ 320 (custom) cpe:2.3:o:sharp:bp-50c26_firmware:-:::::::* cpe:2.3:o:sharp:bp-50c31_firmware:-:::::::* cpe:2.3:o:sharp:bp-50c36_firmware:-:::::::* cpe:2.3:o:sharp:bp-50c45_firmware:-:::::::* cpe:2.3:o:sharp:bp-50c55_firmware:-:::::::* cpe:2.3:o:sharp:bp-50c65_firmware:-:::::::* cpe:2.3:o:sharp:bp-55c26_firmware:-:::::::* cpe:2.3:o:sharp:bp-60c31_firmware:-:::::::* cpe:2.3:o:sharp:bp-60c36_firmware:-:::::::* cpe:2.3:o:sharp:bp-60c45_firmware:-:::::::* cpe:2.3:o:sharp:bp-70c31_firmware:-:::::::* cpe:2.3:o:sharp:bp-70c36_firmware:-:::::::* cpe:2.3:o:sharp:bp-70c45_firmware:-:::::::* cpe:2.3:o:sharp:bp-70c55_firmware:-:::::::* cpe:2.3:o:sharp:bp-70c65_firmware:-:::::::*
sharp	mx-8081_firmware	Affected: 0 , ≤ 160 (custom) cpe:2.3:o:sharp:mx-7081_firmware:-:::::::* cpe:2.3:o:sharp:mx-8081_firmware:-:::::::*
sharp	mx-b476wh_firmware	Affected: 0 , ≤ 413 (custom) cpe:2.3:o:sharp:mx-b356w_firmware:-:::::::* cpe:2.3:o:sharp:mx-b356wh_firmware:-:::::::* cpe:2.3:o:sharp:mx-b376w_firmware:-:::::::* cpe:2.3:o:sharp:mx-b376wh_firmware:-:::::::* cpe:2.3:o:sharp:mx-b456w_firmware:-:::::::* cpe:2.3:o:sharp:mx-b456wh_firmware:-:::::::* cpe:2.3:o:sharp:mx-b476w_firmware:-:::::::* cpe:2.3:o:sharp:mx-b476wh_firmware:-:::::::*
sharp	mx-m905_firmware	Affected: 0 , ≤ 612 (custom) cpe:2.3:o:sharp:mx-m905_firmware:-:::::::*
sharp	mx-6071s_firmware	Affected: 0 , ≤ 613 (custom) cpe:2.3:o:sharp:mx-2651_firmware:-:::::::* cpe:2.3:o:sharp:mx-3051_firmware:-:::::::* cpe:2.3:o:sharp:mx-3061_firmware:-:::::::* cpe:2.3:o:sharp:mx-3061s_firmware:-:::::::* cpe:2.3:o:sharp:mx-3071_firmware:-:::::::* cpe:2.3:o:sharp:mx-3071s_firmware:-:::::::* cpe:2.3:o:sharp:mx-3551_firmware:-:::::::* cpe:2.3:o:sharp:mx-3561_firmware:-:::::::* cpe:2.3:o:sharp:mx-3561s_firmware:-:::::::* cpe:2.3:o:sharp:mx-3571_firmware:-:::::::* cpe:2.3:o:sharp:mx-3571s_firmware:-:::::::* cpe:2.3:o:sharp:mx-4051_firmware:-:::::::* cpe:2.3:o:sharp:mx-4061_firmware:-:::::::* cpe:2.3:o:sharp:mx-4061s_firmware:-:::::::* cpe:2.3:o:sharp:mx-4071_firmware:-:::::::* cpe:2.3:o:sharp:mx-4071s_firmware:-:::::::* cpe:2.3:o:sharp:mx-5051_firmware:-:::::::* cpe:2.3:o:sharp:mx-5071_firmware:-:::::::* cpe:2.3:o:sharp:mx-5071s_firmware:-:::::::* cpe:2.3:o:sharp:mx-6051_firmware:-:::::::* cpe:2.3:o:sharp:mx-6071_firmware:-:::::::* cpe:2.3:o:sharp:mx-6071s_firmware:-:::::::*
sharp	bp-30c25_firmware	Affected: 0 , ≤ 130 (custom) cpe:2.3:o:sharp:bp-30c25t_firmware:-:::::::* cpe:2.3:o:sharp:bp-30c25y_firmware:-:::::::* cpe:2.3:o:sharp:bp-30c25z_firmware:-:::::::* cpe:2.3:o:sharp:bp-30c25_firmware:-:::::::*
sharp	mx-7580n_firmware	Affected: 0 , ≤ 503 (custom) cpe:2.3:o:sharp:mx-6580n_firmware:-:::::::* cpe:2.3:o:sharp:mx-7580n_firmware:-:::::::*
sharp	mx-8090n_firmware	Affected: 0 , ≤ 405 (custom) cpe:2.3:o:sharp:mx-7090n_firmware:-:::::::* cpe:2.3:o:sharp:mx-8090n_firmware:-:::::::*
sharp	mx-6070v_firmware	Affected: 0 , ≤ 802 (custom) cpe:2.3:o:sharp:mx-2630n_firmware:-:::::::* cpe:2.3:o:sharp:mx-3050n_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-3050n_firmware:-:::::::* cpe:2.3:o:sharp:mx-3050v_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-3050v_firmware:-:::::::* cpe:2.3:o:sharp:mx-3550n_firmware:-:::::::* cpe:2.3:o:sharp:mx-3550v_firmware:-:::::::* cpe:2.3:o:sharp:mx-4050n_firmware:-:::::::* cpe:2.3:o:sharp:mx-4050v_firmware:-:::::::* cpe:2.3:o:sharp:mx-5050n_firmware:-:::::::* cpe:2.3:o:sharp:mx-5050v_firmware:-:::::::* cpe:2.3:o:sharp:mx-6050n_firmware:-:::::::* cpe:2.3:o:sharp:mx-6050v_firmware:-:::::::* cpe:2.3:o:sharp:mx-3060n_firmware:-:::::::* cpe:2.3:o:sharp:mx-3060v_firmware:-:::::::* cpe:2.3:o:sharp:mx-3070n_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-3070n_firmware:-:::::::* cpe:2.3:o:sharp:mx-3070v_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-3070v_firmware:-:::::::* cpe:2.3:o:sharp:mx-3560n_firmware:-:::::::* cpe:2.3:o:sharp:mx-3560v_firmware:-:::::::* cpe:2.3:o:sharp:mx-3570n_firmware:-:::::::* cpe:2.3:o:sharp:mx-3570v_firmware:-:::::::* cpe:2.3:o:sharp:mx-4060n_firmware:-:::::::* cpe:2.3:o:sharp:mx-4060v_firmware:-:::::::* cpe:2.3:o:sharp:mx-4070n_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-4070n_firmware:-:::::::* cpe:2.3:o:sharp:mx-4070v_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-4070v_firmware:-:::::::* cpe:2.3:o:sharp:mx-5070n_firmware:-:::::::* cpe:2.3:o:sharp:mx-5070v_firmware:-:::::::* cpe:2.3:o:sharp:mx-6070n_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-6070n_firmware:-:::::::* cpe:2.3:o:sharp:mx-6070v_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-6070v_firmware:-:::::::*
sharp	bp-c545wd_firmware	Affected: 0 , ≤ 262 (custom) cpe:2.3:o:sharp:bp-c533wd_firmware:::::::: cpe:2.3:o:sharp:bp-c533wr_firmware:::::::: cpe:2.3:o:sharp:bp-c535wd_firmware:::::::: cpe:2.3:o:sharp:bp-c535wr_firmware:::::::: cpe:2.3:o:sharp:bp-c542wd_firmware:::::::: cpe:2.3:o:sharp:bp-c545wd_firmware::::::::
sharp	mx-c304wh_firmware	Affected: 0 , ≤ 520 (custom) cpe:2.3:o:sharp:mx-c303_firmware:-:::::::* cpe:2.3:o:sharp:mx-c303w_firmware:-:::::::* cpe:2.3:o:sharp:mx-c303wh_firmware:-:::::::* cpe:2.3:o:sharp:mx-c304_firmware:-:::::::* cpe:2.3:o:sharp:mx-c304w_firmware:-:::::::* cpe:2.3:o:sharp:mx-c304wh_firmware:-:::::::*
sharp	bp-70m90_firmware	Affected: 0 , ≤ 310 (custom) cpe:2.3:o:sharp:bp-70m75_firmware:-:::::::* cpe:2.3:o:sharp:bp-70m90_firmware:-:::::::*
sharp	bp-70m65_firmware	Affected: 0 , ≤ 320 (custom) cpe:2.3:o:sharp:bp-50m26_firmware:-:::::::* cpe:2.3:o:sharp:bp-50m31_firmware:-:::::::* cpe:2.3:o:sharp:bp-50m36_firmware:-:::::::* cpe:2.3:o:sharp:bp-50m45_firmware:-:::::::* cpe:2.3:o:sharp:bp-50m50_firmware:-:::::::* cpe:2.3:o:sharp:bp-50m55_firmware:-:::::::* cpe:2.3:o:sharp:bp-70m31_firmware:-:::::::* cpe:2.3:o:sharp:bp-70m36_firmware:-:::::::* cpe:2.3:o:sharp:bp-70m45_firmware:-:::::::* cpe:2.3:o:sharp:bp-70m55_firmware:-:::::::* cpe:2.3:o:sharp:bp-70m65_firmware:-:::::::*
sharp	mx-m1206_firmware	Affected: 0 , ≤ 200 (custom) cpe:2.3:o:sharp:mx-m1056_firmware:-:::::::* cpe:2.3:o:sharp:mx-m1206_firmware:-:::::::*
sharp	mx-m7570_firmware	Affected: 0 , ≤ 456 (custom) cpe:2.3:o:sharp:mx-m6570_firmware:-:::::::* cpe:2.3:o:sharp:mx-m7570_firmware:-:::::::*
sharp	mx-m6071s_firmware	Affected: 0 , ≤ 413 (custom) cpe:2.3:o:sharp:mx-m5051_firmware:-:::::::* cpe:2.3:o:sharp:mx-m4051_firmware:-:::::::* cpe:2.3:o:sharp:mx-m2651_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3051_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3071_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3071s_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3551_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3571_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3571s_firmware:-:::::::* cpe:2.3:o:sharp:mx-m4071_firmware:-:::::::* cpe:2.3:o:sharp:mx-m4071s_firmware:-:::::::* cpe:2.3:o:sharp:mx-m5071_firmware:-:::::::* cpe:2.3:o:sharp:mx-m5071s_firmware:-:::::::* cpe:2.3:o:sharp:mx-m6051_firmware:-:::::::* cpe:2.3:o:sharp:mx-m6071_firmware:-:::::::* cpe:2.3:o:sharp:mx-m6071s_firmware:-:::::::*
sharp	bp-30m35t_firmware	Affected: 0 , ≤ 220 (custom) cpe:2.3:o:sharp:bp-30m28_firmware:-:::::::* cpe:2.3:o:sharp:bp-30m28t_firmware:-:::::::* cpe:2.3:o:sharp:bp-30m31_firmware:-:::::::* cpe:2.3:o:sharp:bp-30m31t_firmware:-:::::::* cpe:2.3:o:sharp:bp-30m35_firmware:-:::::::* cpe:2.3:o:sharp:bp-30m35t_firmware:-:::::::*
sharp	mx-m6070_firmware	Affected: 0 , ≤ 503 (custom) cpe:2.3:o:sharp:mx-m3550_firmware:-:::::::* cpe:2.3:o:sharp:mx-m2630_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-m2630_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3050_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3050_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3070_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3070_firmware:-:::::::* cpe:2.3:o:sharp:mx-m3570_firmware:-:::::::* cpe:2.3:o:sharp:mx-m4050_firmware:-:::::::* cpe:2.3:o:sharp:mx-m4070_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-m4070_firmware:-:::::::* cpe:2.3:o:sharp:mx-m5050_firmware:-:::::::* cpe:2.3:o:sharp:mx-m5070_firmware:-:::::::* cpe:2.3:o:sharp:mx-m6050_firmware:-:::::::* cpe:2.3:o:sharp:mx-m6070_a_firmware:-:::::::* cpe:2.3:o:sharp:mx-m6070_firmware:-:::::::*
sharp	bp-b550wd_firmware	Affected: 0 , ≤ 260 (custom) cpe:2.3:o:sharp:bp-b537wr_firmware:::::::: cpe:2.3:o:sharp:bp-b540wr_firmware:::::::: cpe:2.3:o:sharp:bp-b547wd_firmware:::::::: cpe:2.3:o:sharp:bp-b550wd_firmware::::::::
sharp	mx-b455wz_firmware	Affected: 0 , ≤ 404 (custom) cpe:2.3:o:sharp:mx-b355w_firmware:-:::::::* cpe:2.3:o:sharp:mx-b355wt_firmware:-:::::::* cpe:2.3:o:sharp:mx-b355wz_firmware:-:::::::* cpe:2.3:o:sharp:mx-b455w_firmware:-:::::::* cpe:2.3:o:sharp:mx-b455wt_firmware:-:::::::* cpe:2.3:o:sharp:mx-b455wz_firmware:-:::::::*
toshibatec	e-studio-908_firmware	Affected: 0 , ≤ t2.12.h3.00 (custom) cpe:2.3:o:toshibatec:e-studio-908_firmware::::::::
toshibatec	e-studio-1058_firmware	Affected: 0 , ≤ t1.01.h4.00 (custom) cpe:2.3:o:toshibatec:e-studio-1058_firmware::::::::
toshibatec	e-studio-1208_firmware	Affected: 0 , ≤ t1.01.h4.00 (custom) cpe:2.3:o:toshibatec:e-studio-1208_firmware::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:sharp:bp-90c70_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-90c80_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "bp-90c80_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "210",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:bp-50c26_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50c31_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50c36_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50c45_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50c55_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50c65_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-55c26_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-60c31_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-60c36_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-60c45_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70c31_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70c36_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70c45_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70c55_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70c65_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "bp-70c65_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "320",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-7081_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-8081_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-8081_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "160",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-b356w_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b356wh_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b376w_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b376wh_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b456w_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b456wh_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b476w_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b476wh_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-b476wh_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "413",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-m905_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-m905_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "612",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-2651_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3051_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3061_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3061s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3071_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3071s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3551_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3561_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3561s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3571_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3571s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4051_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4061_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4061s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4071_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4071s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-5051_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-5071_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-5071s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-6051_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-6071_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-6071s_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-6071s_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "613",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:bp-30c25t_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-30c25y_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-30c25z_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-30c25_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "bp-30c25_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "130",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-6580n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-7580n_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-7580n_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "503",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-7090n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-8090n_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-8090n_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "405",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-2630n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3050n_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3050n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3050v_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3050v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3550n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3550v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4050n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4050v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-5050n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-5050v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-6050n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-6050v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3060n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3060v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3070n_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3070n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3070v_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3070v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3560n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3560v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3570n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-3570v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4060n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4060v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4070n_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4070n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4070v_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-4070v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-5070n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-5070v_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-6070n_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-6070n_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-6070v_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-6070v_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-6070v_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "802",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:bp-c533wd_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-c533wr_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-c535wd_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-c535wr_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-c542wd_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-c545wd_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "bp-c545wd_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "262",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-c303_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-c303w_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-c303wh_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-c304_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-c304w_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-c304wh_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-c304wh_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "520",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:bp-70m75_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70m90_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "bp-70m90_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "310",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:bp-50m26_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50m31_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50m36_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50m45_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50m50_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-50m55_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70m31_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70m36_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70m45_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70m55_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-70m65_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "bp-70m65_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "320",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-m1056_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m1206_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-m1206_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "200",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-m6570_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m7570_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-m7570_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "456",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-m5051_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m4051_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m2651_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3051_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3071_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3071s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3551_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3571_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3571s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m4071_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m4071s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m5071_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m5071s_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m6051_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m6071_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m6071s_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-m6071s_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "413",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:bp-30m28_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-30m28t_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-30m31_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-30m31t_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-30m35_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-30m35t_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "bp-30m35t_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "220",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-m3550_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m2630_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m2630_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3050_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3050_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3070_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3070_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m3570_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m4050_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m4070_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m4070_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m5050_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m5070_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m6050_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m6070_a_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-m6070_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-m6070_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "503",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:bp-b537wr_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-b540wr_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-b547wd_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:bp-b550wd_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "bp-b550wd_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "260",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:sharp:mx-b355w_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b355wt_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b355wz_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b455w_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b455wt_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:sharp:mx-b455wz_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mx-b455wz_firmware",
            "vendor": "sharp",
            "versions": [
              {
                "lessThanOrEqual": "404",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:toshibatec:e-studio-908_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "e-studio-908_firmware",
            "vendor": "toshibatec",
            "versions": [
              {
                "lessThanOrEqual": "t2.12.h3.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:toshibatec:e-studio-1058_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "e-studio-1058_firmware",
            "vendor": "toshibatec",
            "versions": [
              {
                "lessThanOrEqual": "t1.01.h4.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:toshibatec:e-studio-1208_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "e-studio-1208_firmware",
            "vendor": "toshibatec",
            "versions": [
              {
                "lessThanOrEqual": "t1.01.h4.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47406",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-25T18:33:07.833042Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-25T18:38:24.503Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Sharp Digital Full-color MFPs and Monochrome MFPs",
          "vendor": "Sharp Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "see the information provided by Sharp Corporation"
            }
          ]
        },
        {
          "product": "e-STUDIO 908",
          "vendor": "Toshiba Tec Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "T2.12.h3.00 and earlier versions"
            }
          ]
        },
        {
          "product": "e-STUDIO 1058",
          "vendor": "Toshiba Tec Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "T1.01.h4.00 and earlier versions"
            }
          ]
        },
        {
          "product": "e-STUDIO 1208",
          "vendor": "Toshiba Tec Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "T1.01.h4.00 and earlier versions"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-25T09:02:10.791Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://jvn.jp/en/vu/JVNVU95063136/"
        },
        {
          "url": "https://global.sharp/products/copier/info/info_security_2024-10.html"
        },
        {
          "url": "https://www.toshibatec.com/information/20241025_01.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2024-47406",
    "datePublished": "2024-10-25T06:18:36.274Z",
    "dateReserved": "2024-10-16T05:26:40.226Z",
    "dateUpdated": "2024-10-25T18:38:24.503Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-47010 (GCVE-0-2024-47010)

Vulnerability from cvelistv5 – Published: 2024-10-08 16:29 – Updated: 2024-10-08 17:39

Summary

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-08 17:37 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

ivanti mitre root

References

1 reference

URL	Tags
https://forums.ivanti.com/s/article/Ivanti-Avalan…

Impacted products

2 products

Vendor	Product	Version
Ivanti	Avalanche	Unaffected: 6.4.5 (custom)
ivanti	avalanche	Affected: 0 , ≤ 6.4.2.313 (custom) cpe:2.3:a:ivanti:avalanche::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "avalanche",
            "vendor": "ivanti",
            "versions": [
              {
                "lessThanOrEqual": "6.4.2.313",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47010",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T17:37:11.958567Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T17:39:47.159Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Avalanche",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "6.4.5",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003ePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;\u003c/span\u003e"
            }
          ],
          "value": "Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-115 Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-08T16:29:57.222Z",
        "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "shortName": "ivanti"
      },
      "references": [
        {
          "url": "https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
    "assignerShortName": "ivanti",
    "cveId": "CVE-2024-47010",
    "datePublished": "2024-10-08T16:29:57.222Z",
    "dateReserved": "2024-09-16T17:43:00.640Z",
    "dateUpdated": "2024-10-08T17:39:47.159Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-47009 (GCVE-0-2024-47009)

Vulnerability from cvelistv5 – Published: 2024-10-08 16:28 – Updated: 2024-10-08 17:40

Summary

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-08 17:37 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

ivanti mitre root

References

1 reference

URL	Tags
https://forums.ivanti.com/s/article/Ivanti-Avalan…

Impacted products

2 products

Vendor	Product	Version
Ivanti	Avalanche	Unaffected: 6.4.5 (custom)
ivanti	avalanche	Affected: 0 , ≤ 6.4.2.313 (custom) cpe:2.3:a:ivanti:avalanche::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "avalanche",
            "vendor": "ivanti",
            "versions": [
              {
                "lessThanOrEqual": "6.4.2.313",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47009",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T17:37:23.001395Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T17:40:31.429Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Avalanche",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "6.4.5",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003ePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;\u003c/span\u003e"
            }
          ],
          "value": "Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-115 Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-08T16:28:53.641Z",
        "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "shortName": "ivanti"
      },
      "references": [
        {
          "url": "https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
    "assignerShortName": "ivanti",
    "cveId": "CVE-2024-47009",
    "datePublished": "2024-10-08T16:28:53.641Z",
    "dateReserved": "2024-09-16T17:43:00.640Z",
    "dateUpdated": "2024-10-08T17:40:31.429Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-46887 (GCVE-0-2024-46887)

Vulnerability from cvelistv5 – Published: 2024-10-08 08:40 – Updated: 2025-10-21 14:12

Summary

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-08 13:51 UTC

CWE

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

siemens icscert root

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/html/…

Impacted products

105 products

Vendor	Product	Version
Siemens	SIMATIC Drive Controller CPU 1504D TF	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC Drive Controller CPU 1507D TF	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC ET 200SP CPU 1510SP F-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC ET 200SP CPU 1510SP F-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC ET 200SP CPU 1510SP-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC ET 200SP CPU 1510SP-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC ET 200SP CPU 1512SP F-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC ET 200SP CPU 1512SP F-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC ET 200SP CPU 1512SP-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC ET 200SP CPU 1512SP-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC ET 200SP CPU 1514SP F-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC ET 200SP CPU 1514SP-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC ET 200SP CPU 1514SPT F-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC ET 200SP CPU 1514SPT-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS	Affected: 0 , < V21.9.8 (custom)
Siemens	SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS	Affected: 0 , < V31.1.4 (custom)
Siemens	SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS	Affected: 0 , < V31.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1511-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1511-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1511C-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1511C-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1511F-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1511F-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1511T-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1511T-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1511TF-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1511TF-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1512C-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1512C-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1513-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1513-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1513F-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1513F-1 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1513pro F-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1513pro-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1515-2 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1515-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1515F-2 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1515F-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1515T-2 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1515T-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1515TF-2 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1515TF-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1516-3 PN/DP	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1516-3 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1516F-3 PN/DP	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU 1516F-3 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1516pro F-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1516pro-2 PN	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1516T-3 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1516TF-3 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1517-3 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1517F-3 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1517T-3 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1517TF-3 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1518T-4 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU 1518TF-4 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1507S F V2	Affected: 0 , < V21.9.8 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1507S F V3	Affected: 0 , < V31.1.4 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1507S V2	Affected: 0 , < V21.9.8 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1507S V3	Affected: 0 , < V31.1.4 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1508S F V2	Affected: 0 , < V21.9.8 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1508S F V3	Affected: 0 , < V31.1.4 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1508S T V3	Affected: 0 , < V31.1.4 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1508S TF V3	Affected: 0 , < V31.1.4 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1508S V2	Affected: 0 , < V21.9.8 (custom)
Siemens	SIMATIC S7-1500 Software Controller CPU 1508S V3	Affected: 0 , < V31.1.4 (custom)
Siemens	SIMATIC S7-1500 Software Controller Linux V2	Affected: 0 , < * (custom)
Siemens	SIMATIC S7-1500 Software Controller Linux V3	Affected: 0 , < V31.1.4 (custom)
Siemens	SIMATIC S7-PLCSIM Advanced	Affected: 0 , < V7.0 (custom)
Siemens	SIPLUS ET 200SP CPU 1510SP F-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS ET 200SP CPU 1510SP-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS ET 200SP CPU 1510SP-1 PN RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS ET 200SP CPU 1512SP F-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS ET 200SP CPU 1512SP-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS ET 200SP CPU 1512SP-1 PN RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1511-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1511-1 PN TX RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1511F-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1513-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1513F-1 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1515F-2 PN	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1515F-2 PN RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1516-3 PN/DP	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1516F-3 PN/DP	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL	Affected: 0 , < V2.9.8 (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: 0 , < V3.1.4 (custom)
Siemens	SIPLUS S7-1500 CPU 1518F-4 PN/DP	Affected: 0 , < V3.1.4 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-46887",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T13:51:56.485006Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T14:12:27.657Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC Drive Controller CPU 1504D TF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC Drive Controller CPU 1507D TF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1510SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1510SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1510SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1510SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1512SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1512SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1512SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1512SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1514SP F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1514SP-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1514SPT F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP CPU 1514SPT-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs - Windows OS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V21.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Industrial OS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V31.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V3 CPUs - Windows OS",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V31.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511C-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511C-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511C-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511T-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511T-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511TF-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1511TF-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1512C-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1512C-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1512C-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513pro F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1513pro-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515T-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515T-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515TF-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1515TF-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516pro F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516pro-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516T-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1516TF-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1517-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1517F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1517F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1517T-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1517TF-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1518T-4 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU 1518TF-4 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1507S F V2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V21.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1507S F V3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V31.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1507S V2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V21.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1507S V3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V31.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1508S F V2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V21.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1508S F V3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V31.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1508S T V3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V31.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1508S TF V3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V31.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1508S V2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V21.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller CPU 1508S V3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V31.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller Linux V2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-1500 Software Controller Linux V3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V31.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC S7-PLCSIM Advanced",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V7.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1510SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1510SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1510SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1510SP-1 PN RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1510SP-1 PN RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1512SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1512SP F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1512SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1512SP-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1512SP-1 PN RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CPU 1512SP-1 PN RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511-1 PN TX RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511-1 PN TX RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1511F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1513-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1513-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1513-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1513-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1513F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1513F-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1515F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1515F-2 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1515F-2 PN RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516F-3 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.9.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1500 CPU 1518F-4 PN/DP",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The web server of affected devices do not properly authenticate user request to the \u0027/ClientArea/RuntimeInfoData.mwsl\u0027 endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "CWE-288: Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-14T09:15:06.254Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-054046.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2024-46887",
    "datePublished": "2024-10-08T08:40:43.510Z",
    "dateReserved": "2024-09-12T07:44:52.468Z",
    "dateUpdated": "2025-10-21T14:12:27.657Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-43692 (GCVE-0-2024-43692)

Vulnerability from cvelistv5 – Published: 2024-09-24 23:46 – Updated: 2024-09-25 17:00

Title

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Authentication Bypass Using an Alternate Path or Channel

Summary

An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-25 16:59 UTC

CWE

CWE-288

Assigner

icscert icscert root

References

1 reference

URL	Tags
https://www.cisa.gov/news-events/ics-advisories/i…

Impacted products

4 products

Vendor	Product	Version
Dover Fueling Solutions (DFS)	ProGauge MAGLINK LX CONSOLE	Affected: 0 , ≤ 3.4.2.2.6 (custom)
Dover Fueling Solutions (DFS)	ProGauge MAGLINK LX4 CONSOLE	Affected: 0 , ≤ 4.17.9e (custom)
doverfuelingsolutions	maglink_lx_console	Affected: 0 , ≤ 3.4.2.2.6 (custom) cpe:2.3:a:doverfuelingsolutions:maglink_lx_console::::::::
doverfuelingsolutions	maglink_lx4_console	Affected: 0 , ≤ 4.17.9e (custom) cpe:2.3:a:doverfuelingsolutions:maglink_lx4_console::::::::

Credits

Pedro Umbelino of Bitsight reported these vulnerabilities to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:doverfuelingsolutions:maglink_lx_console:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "maglink_lx_console",
            "vendor": "doverfuelingsolutions",
            "versions": [
              {
                "lessThanOrEqual": "3.4.2.2.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:doverfuelingsolutions:maglink_lx4_console:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "maglink_lx4_console",
            "vendor": "doverfuelingsolutions",
            "versions": [
              {
                "lessThanOrEqual": "4.17.9e",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-43692",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-25T16:59:20.584214Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-25T17:00:19.138Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ProGauge MAGLINK LX CONSOLE",
          "vendor": "Dover Fueling Solutions (DFS)",
          "versions": [
            {
              "lessThanOrEqual": "3.4.2.2.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ProGauge MAGLINK LX4 CONSOLE",
          "vendor": "Dover Fueling Solutions (DFS)",
          "versions": [
            {
              "lessThanOrEqual": "4.17.9e",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Pedro Umbelino of Bitsight reported these vulnerabilities to CISA."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker can directly request the ProGauge MAGLINK LX CONSOLE \nresource sub page with full privileges by requesting the URL directly."
            }
          ],
          "value": "An attacker can directly request the ProGauge MAGLINK LX CONSOLE \nresource sub page with full privileges by requesting the URL directly."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "CWE-288",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-24T23:46:12.640Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Dover Fueling Solutions released a new software update version 4.19.10 \nfor the MagLink LX console to address these vulnerabilities. The \nsoftware release is available for installation on consoles through DFS\u0027s\n authorized service organizations in North America. North American users\n can reach DFS\u0027s customer support team by telephone at 877-679-8324.\n\n\u003cbr\u003e"
            }
          ],
          "value": "Dover Fueling Solutions released a new software update version 4.19.10 \nfor the MagLink LX console to address these vulnerabilities. The \nsoftware release is available for installation on consoles through DFS\u0027s\n authorized service organizations in North America. North American users\n can reach DFS\u0027s customer support team by telephone at 877-679-8324."
        }
      ],
      "source": {
        "advisory": "ICSA-24-268-04",
        "discovery": "EXTERNAL"
      },
      "title": "Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Authentication Bypass Using an Alternate Path or Channel",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eDFS strongly encourages users of MagLink products to:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eInstall MagLink consoles behind firewalls for security.\u003c/li\u003e\n\u003cli\u003eMonitor and install updates on a timely basis.\u003c/li\u003e\n\u003cli\u003eContact DFS customer support with any questions about operations or updates of MagLink software.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAlternatively, MagLink may operate offfline or disconnected from a network.\u003c/p\u003e\n\u003cp\u003eRegistered MagLink customers have access to technical information, \nupdates, and technical bulletins via a DFS proprietary portal.\u003c/p\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "DFS strongly encourages users of MagLink products to:\n\n\n\n  *  Install MagLink consoles behind firewalls for security.\n\n  *  Monitor and install updates on a timely basis.\n\n  *  Contact DFS customer support with any questions about operations or updates of MagLink software.\n\n\n\n\nAlternatively, MagLink may operate offfline or disconnected from a network.\n\n\nRegistered MagLink customers have access to technical information, \nupdates, and technical bulletins via a DFS proprietary portal."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2024-43692",
    "datePublished": "2024-09-24T23:46:12.640Z",
    "dateReserved": "2024-09-05T20:11:00.318Z",
    "dateUpdated": "2024-09-25T17:00:19.138Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-43234 (GCVE-0-2024-43234)

Vulnerability from cvelistv5 – Published: 2024-12-16 15:36 – Updated: 2026-04-29 09:51

Title

WordPress Woffice theme <= 5.4.14 - Unauthenticated Account Takeover vulnerability

Summary

Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.This issue affects Woffice: from n/a through <= 5.4.14.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-16 18:10 UTC

CWE

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

Assigner

Patchstack mitre root

References

1 reference

URL	Tags
https://patchstack.com/database/Wordpress/Theme/w…	vdb-entry

Impacted products

1 product

Vendor	Product	Version
WofficeIO	Woffice	Affected: 0 , ≤ 5.4.14 (custom)

Date Public

2026-04-01 16:27

Credits

Rafie Muhammad | Patchstack Bug Bounty Program

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-43234",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-16T18:10:16.276628Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-16T18:10:25.763Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "woffice",
          "product": "Woffice",
          "vendor": "WofficeIO",
          "versions": [
            {
              "changes": [
                {
                  "at": "5.4.15",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "5.4.14",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Rafie Muhammad | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-04-01T16:27:09.359Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.\u003cp\u003eThis issue affects Woffice: from n/a through \u003c= 5.4.14.\u003c/p\u003e"
            }
          ],
          "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authentication Bypass.This issue affects Woffice: from n/a through \u003c= 5.4.14."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-29T09:51:53.076Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/Wordpress/Theme/woffice/vulnerability/wordpress-woffice-theme-5-4-14-unauthenticated-account-takeover-vulnerability?_s_id=cve"
        }
      ],
      "title": "WordPress Woffice theme \u003c= 5.4.14 - Unauthenticated Account Takeover vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2024-43234",
    "datePublished": "2024-12-16T15:36:22.166Z",
    "dateReserved": "2024-08-09T09:20:16.409Z",
    "dateUpdated": "2026-04-29T09:51:53.076Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Mitigation

Architecture and Design

Funnel all access through a single choke point to simplify how users can access a resource. For every access, perform a check to determine if the user has permissions to access the resource.

CAPEC-127: Directory Indexing

An adversary crafts a request to a target that results in the target listing/indexing the content of a directory as output. One common method of triggering directory contents as output is to construct a request containing a path that terminates in a directory name rather than a file name since many applications are configured to provide a list of the directory's contents when such a request is received. An adversary can use this to explore the directory tree on a target as well as learn the names of files. This can often end up revealing test files, backup files, temporary files, hidden files, configuration files, user accounts, script contents, as well as naming conventions, all of which can be used by an attacker to mount additional attacks.

CAPEC-665: Exploitation of Thunderbolt Protection Flaws

An adversary leverages a firmware weakness within the Thunderbolt protocol, on a computing device to manipulate Thunderbolt controller firmware in order to exploit vulnerabilities in the implementation of authorization and verification schemes within Thunderbolt protection mechanisms. Upon gaining physical access to a target device, the adversary conducts high-level firmware manipulation of the victim Thunderbolt controller SPI (Serial Peripheral Interface) flash, through the use of a SPI Programing device and an external Thunderbolt device, typically as the target device is booting up. If successful, this allows the adversary to modify memory, subvert authentication mechanisms, spoof identities and content, and extract data and memory from the target device. Currently 7 major vulnerabilities exist within Thunderbolt protocol with 9 attack vectors as noted in the Execution Flow.

← Back to the CWE list