CVE-2024-1623

CVSS V2 None CVSS V3 None

Description

Insufficient session timeout vulnerability in the FAST3686 V2 Vodafone router from Sagemcom. This vulnerability could allow a local attacker to access the administration panel without requiring login credentials. This vulnerability is possible because the 'Login.asp and logout.asp' files do not handle session details correctly.

Overview

CVE ID
CVE-2024-1623

Assigner
INCIBE

Vulnerability Status
PUBLISHED

Published Version
2024-03-14T12:47:40.629Z

Last Modified Date
2024-03-14T12:47:40.629Z

Weakness Enumerations

CWE	URL
CWE-613	http://cwe.mitre.org/data/definitions/613.html

References

Reference URL	Reference Tags
https://www.incibe.es/en/incibe-cert/notices/aviso/insufficient-session-timeout-vulnerability-sagemcom-router

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-1623
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1623

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 06:18:28				Added to TrackCVE