CVE-2024-38879

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 All versions, Omnivise T3000 R8.2 SP3 All versions, Omnivise T3000 R8.2 SP4 All versions. The affected system exposes the port of an internal application on the public network interface allowing an attacker to circumven...

Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Siemens Energy Omnivise T3000 vulnerable version: =8.2 SP3 fixed version: see solution section CVE number: CVE-2024-38876, CVE-2024-3887...

CVE-2024-38879

creationtimestamp| type| source ---|---|--- 2024-08-02 14:01:23+00:00| seen| https://t.me/cvedetector/2349 2024-11-13 04:03:41+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113473658534013466...

CVE-2024-38879

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 All versions, Omnivise T3000 R8.2 SP3 All versions, Omnivise T3000 R8.2 SP4 All versions. The affected system exposes the port of an internal application on the public network interface allowing an attacker to circumven...

CVE-2024-38879

CVE-2024-38879 affects Siemens Energy Omnivise T3000 (Application Server) with exposed internal application port on public network interfaces across R9.2 and R8.2 SP3/SP4, enabling an attacker to bypass authentication and directly access the exposed application. The root cause is exposure of an i...