Lucene search
HistoryJul 11, 2024 - 10:15 a.m.
CVE-2024-6407
cve-2024-6407
information exposure
disclosure of credentials
specially crafted message
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.5%
CWE-200: Information Exposure vulnerability exists that could cause disclosure of
credentials when a specially crafted message is sent to the device.
Affected configurations
Node
schneider-electricwhc-5918a_firmware
schneider-electricwhc-5918aMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| schneider-electric | whc-5918a_firmware | * | cpe:2.3:o:schneider-electric:whc-5918a_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | whc-5918a | - | cpe:2.3:h:schneider-electric:whc-5918a:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-6407
2024-07-11 10:15:02
vulnrichment
vulnrichment
CVE-2024-6407
2024-07-11 09:07:40
cvelist
cvelist
CVE-2024-6407
2024-07-11 09:07:40
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.5%
Related for NVD:CVE-2024-6407