Lucene search
THA-PSIRTCVELIST:CVE-2024-5264HistoryMay 23, 2024 - 8:40 a.m.
CVE-2024-5264 Network Key Transfer with AES KHT vulnerability in Luna EFT
2024-05-2308:40:56
CWE-338
THA-PSIRT
www.cve.org
cve-2024-5264
network key transfer
aes kht
thales luna eft
administrative console
offline analysis
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
19.5%
Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis
CNA Affected
[
{
"defaultStatus": "unaffected",
"modules": [
"Network Key Transfer with AES KHT"
],
"platforms": [
"Appliance"
],
"product": "Luna EFT",
"vendor": "Thales",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
}
]Related
cve
cve
CVE-2024-5264
2024-05-23 09:15:10
nvd
nvd
CVE-2024-5264
2024-05-23 09:15:10
vulnrichment
vulnrichment
CVE-2024-5264 Network Key Transfer with AES KHT vulnerability in Luna EFT
2024-05-23 08:40:56
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
19.5%
Related for CVELIST:CVE-2024-5264