Lucene search

GovTech CSGVULNRICHMENT:CVE-2024-4225

HistoryApr 30, 2024 - 6:47 a.m.

CVE-2024-4225 NGDIN_ST v2.0D.0062 - Multiple Vulnerabilities

2024-04-3006:47:30

CWE-284

GovTech CSG

github.com

netguardian din rtu

security vulnerabilities

web interface

user privilege

credential theft

xss

csrf

CVSS3

7.6

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user’s privilege, steal user’s credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:dpstele:ngdin_st:2.0d.0062:*:*:*:*:*:*:*"
    ],
    "vendor": "dpstele",
    "product": "ngdin_st",
    "versions": [
      {
        "status": "affected",
        "version": "2.0d.0062"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html

CVSS3

7.6

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-4225