CVE-2024-38878
CVSS V2 None
CVSS V3 None
Description
A vulnerability has been identified in Omnivise T3000 Application Server (All versions). Affected devices allow authenticated users to export diagnostics data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download arbitrary files from the file system.
Overview
- CVE ID
- CVE-2024-38878
- Assigner
- siemens
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-08-02T10:36:19.439Z
- Last Modified Date
- 2024-08-02T14:00:46.747Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-857368.html |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-38878 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38878 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-08-03 13:10:52 | Added to TrackCVE |