Lucene search

K
cve[email protected]CVE-2024-3264
HistoryJun 24, 2024 - 1:15 p.m.

CVE-2024-3264

2024-06-2413:15:11
CWE-327
web.nvd.nist.gov
16
vulnerability
cryptographic algorithm
mia technology inc
signature spoofing
improper validation
mia-med health aplication
software version 1.0.14

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.1%

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Mia Technology Inc. Mia-Med Health Aplication allows Signature Spoofing by Improper Validation.This issue affects Mia-Med Health Aplication: before 1.0.14.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Mia-Med Health Aplication",
    "vendor": "Mia Technology Inc.",
    "versions": [
      {
        "lessThan": "1.0.14",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.1%

Related for CVE-2024-3264