Lucene search

K
nvd[email protected]NVD:CVE-2024-23629
HistoryJan 26, 2024 - 12:15 a.m.

CVE-2024-23629

2024-01-2600:15:11
CWE-287
web.nvd.nist.gov
vulnerability
web component
motorola mr2600
authentication bypass
protected urls
sensitive information

7.8 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:C/I:C/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs and retrieve sensitive information.

Affected configurations

NVD
Node
motorolamr2600_firmwareMatch-
AND
motorolamr2600Match-

7.8 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:C/I:C/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.2%

Related for NVD:CVE-2024-23629