CVE-2024-8878 Unauthenticated Password Reset

2024-09-2415:14:31

CWE-640

CyberDanube

www.cve.org

cve-2024-8878

password recovery

riello netman 204

unauthenticated

admin password

device control affect

netman 204 4.05

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

EPSS

0.001

Percentile

39.6%

JSON

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Netman 204",
    "vendor": "Riello",
    "versions": [
      {
        "lessThanOrEqual": "4.05",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]