NozomiVULNRICHMENT:CVE-2024-3082CVE-2024-3082
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
21.2%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext.
CNA Affected
[
{
"vendor": "Plug&Track",
"product": "Sensor Net Connect V2",
"versions": [
{
"status": "affected",
"version": "2.24",
"versionType": "semver"
}
],
"defaultStatus": "unknown"
}
]ADP Affected
[
{
"cpes": [
"cpe:2.3:h:proges:sensor_net_connect:2.24:*:*:*:*:*:*:*"
],
"vendor": "proges",
"product": "sensor_net_connect",
"versions": [
{
"status": "affected",
"version": "2.24"
}
],
"defaultStatus": "unknown"
}
]Related
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
21.2%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total