Lucene search

K
nvd[email protected]NVD:CVE-2024-45692
HistorySep 04, 2024 - 11:15 p.m.

CVE-2024-45692

2024-09-0423:15:12
CWE-835
web.nvd.nist.gov
2
webmin
virtualmin
network traffic loop
udp packets
port 10000
cve-2024-45692

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

26.0%

Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.

Affected configurations

Nvd
Node
virtualminvirtualminRange<7.20.2
OR
webminwebminRange<2.202
VendorProductVersionCPE
virtualminvirtualmin*cpe:2.3:a:virtualmin:virtualmin:*:*:*:*:*:*:*:*
webminwebmin*cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

26.0%

Related for NVD:CVE-2024-45692