Lucene search
INCDVULNRICHMENT:CVE-2024-36388HistoryJun 02, 2024 - 1:14 p.m.
CVE-2024-36388 MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
2024-06-0213:14:46
CWE-305
INCD
github.com
milesight
devicehub
cve-2024-36388
cwe-305
missing authentication
critical function
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7.1 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.2%
MileSight DeviceHub -
CWE-305 Missing Authentication for Critical Function
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "DeviceHub",
"vendor": "MileSight",
"versions": [
{
"lessThan": "Upgrade to the latest version.",
"status": "affected",
"version": "v3.0.1-r1 for Ubuntu 20.04",
"versionType": "custom"
}
]
}
]
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
7.1 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.2%
Related for VULNRICHMENT:CVE-2024-36388