CVE-2024-32051

2024-04-2405:45:13

jpcert

github.com

cve-2024-32051

roamwifi

sensitive information

log file

vulnerability

network

device access

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Insertion of sensitive information into log file issue exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may obtain sensitive information.

CNA Affected

[
  {
    "vendor": "RoamWiFi Technology Co., Ltd.",
    "product": "RoamWiFi R10",
    "versions": [
      {
        "version": "prior to 4.8.45",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN62737544/

www.roamwifi.hk/product.jsp