CVE-2024-39771

2024-08-2805:54:05

jpcert

www.cve.org

qbic cloud

safie one

certificate validation

man-in-the-middle attack

network-adjacent

EPSS

0.001

Percentile

22.3%

JSON

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack.

CNA Affected

[
  {
    "vendor": "Safie Inc.",
    "product": "QBiC CLOUD CC-2L",
    "versions": [
      {
        "version": "v1.1.30 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Safie Inc.",
    "product": "Safie One",
    "versions": [
      {
        "version": "v1.8.2 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN83440451/

safie.jp/information/post_6933/

EPSS

0.001

Percentile

22.3%

JSON

Related for CVELIST:CVE-2024-39771