Lucene search
CERTVDEVULNRICHMENT:CVE-2024-26005HistoryMar 12, 2024 - 8:12 a.m.
CVE-2024-26005 PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series
2024-03-1208:12:48
CWE-459
CERTVDE
github.com
cve-2024-26005
phoenix contact
privilege gain
incomplete cleanup
dos
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7.4
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
An unauthenticated remote attacker can gain service level privileges through an incomplete cleanup during service restart after a DoS.
References
Related
prion
prion
Design/Logic Flaw
2024-03-12 09:15:00
cvelist
cvelist
cve
cve
CVE-2024-26005
2024-03-12 09:15:09
zdi
zdi
nvd
nvd
CVE-2024-26005
2024-03-12 09:15:09
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7.4
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-26005