Lucene search

K
nvd[email protected]NVD:CVE-2024-39278
HistorySep 05, 2024 - 11:15 p.m.

CVE-2024-39278

2024-09-0523:15:12
CWE-522
web.nvd.nist.gov
3
credentials
unencrypted
flash memory
read-only access
network configuration
terminal configuration

CVSS3

4.2

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.6%

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data.

CVSS3

4.2

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.6%

Related for NVD:CVE-2024-39278