Lucene search

K
githubexploit9D50C113-AEAB-5E17-8F26-CFF2B82BD5D3
HistoryJan 27, 2024 - 6:17 p.m.

Exploit for Inadequate Encryption Strength in Alpha-Innotec Heat Pumps Firmware

2024-01-2718:17:48
11
alpha-innotec
novelan
heat pumps
firmware
encryption strength
password
network
ssh service
vulnerability
lan
ait deutschland
oem
cve-2024-22894
luxtronic controller
system root user
3des
shodan
internet
configuration files
damage
ssh version
fingerprint
settings.

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.2%

CVE-2024-22894

Downloaded the latest heatpump firmware version…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.2%

Related for 9D50C113-AEAB-5E17-8F26-CFF2B82BD5D3