Lucene search
HistoryMay 19, 2024 - 8:15 p.m.
CVE-2024-36081
westermo edw-100
unauthenticated access
configuration file
cleartext password
network edge
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.
Related
cvelist
cvelist
CVE-2024-36081
1976-01-01 00:00:00
vulnrichment
vulnrichment
CVE-2024-36081
1976-01-01 00:00:00
cve
cve
CVE-2024-36081
2024-05-19 20:15:08
ics
ics
Westermo EDW-100
2024-05-30 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
Related for NVD:CVE-2024-36081