Lucene search
HistoryMar 12, 2024 - 9:15 a.m.
CVE-2024-26288
cve-2024-26288
sensitive data
mitm attack
encryption
unauthenticated
remote attacker
communication
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
8.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.0%
An unauthenticated remote attacker can influence the communication due to the lack of encryption of sensitive data via a MITM. Charging is not affected.
References
Related
cve
cve
CVE-2024-26288
2024-03-12 09:15:09
prion
prion
Design/Logic Flaw
2024-03-12 09:15:00
vulnrichment
vulnrichment
CVE-2024-26288 PHOENIX CONTACT: Lack of SSL support in CHARX Series
2024-03-12 08:13:05
zdi
zdi
cvelist
cvelist
CVE-2024-26288 PHOENIX CONTACT: Lack of SSL support in CHARX Series
2024-03-12 08:13:05
8.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
8.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.0%
Related for NVD:CVE-2024-26288