CVE-2024-7007 Authentication Bypass Using an Alternate Path or Channel in Positron Broadcast Signal Processor TRA7005

2024-07-2516:42:43

CWE-288

icscert

www.cve.org

positron

broadcast signal processor

tra7005

authentication bypass

vulnerability

unauthorized access

CVSS4

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N

EPSS

0.001

Percentile

39.6%

JSON

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Broadcast Signal Processor TRA7005",
    "vendor": "Positron S.R.L",
    "versions": [
      {
        "status": "affected",
        "version": "v1.20"
      }
    ]
  }
]