CVE-2024-39771

2024-08-2805:54:05

jpcert

github.com

cve-2024-39771

certificate validation

man-in-the-middle

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

22.3%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack.