Lucene search
HistorySep 02, 2024 - 6:15 p.m.
CVE-2024-6921
cleartext storage
sensitive data
nacpremium
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.7%
Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data.This issue affects NACPremium: through 01082024.
Affected configurations
Node
nacnacpremiumRange≤2024-08-01
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nac | nacpremium | * | cpe:2.3:a:nac:nacpremium:*:*:*:*:*:*:*:* |
References
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
37.7%
Related for NVD:CVE-2024-6921