CVE-2024-29225

2024-04-0400:15:07

[email protected]

web.nvd.nist.gov

cve-2024-29225

configuration file

sensitive information

network-adjacent attacker

unauthenticated

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1.24 and earlier allow a network-adjacent unauthenticated attacker to obtain the configuration file containing sensitive information by sending a specially crafted request.

References

jvn.jp/en/vu/JVNVU95381465/

www.elecom.co.jp/news/security/20240326-01/