CVE-2024-28134

CVSS V2 None CVSS V3 None

Description

An unauthenticated remote attacker can extract a session token with a MitM attack and gain web-based management access with the privileges of the currently logged in user due to cleartext transmission of sensitive information. No additional user interaction is required. The access is limited as only non-sensitive information can be obtained but the availability can be seriously affected.

Overview

CVE ID
CVE-2024-28134

Assigner
CERTVDE

Vulnerability Status
PUBLISHED

Published Version
2024-05-14T08:09:24.900Z

Last Modified Date
2024-06-06T15:24:34.250Z

Weakness Enumerations

CWE	URL
CWE-319	http://cwe.mitre.org/data/definitions/319.html

References

Reference URL	Reference Tags
https://cert.vde.com/en/advisories/VDE-2024-019

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-28134
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28134

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 07:55:00				Added to TrackCVE