Lucene search
SchneiderVULNRICHMENT:CVE-2024-6407HistoryJul 11, 2024 - 9:07 a.m.
CVE-2024-6407
2024-07-1109:07:40
CWE-200
schneider
github.com
2
cve-2024-6407
information exposure
credentials disclosure
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
CWE-200: Information Exposure vulnerability exists that could cause disclosure of
credentials when a specially crafted message is sent to the device.
CNA Affected
[
{
"vendor": "Schneider Electric",
"product": "Wiser Home Controller WHC-5918A",
"versions": [
{
"status": "affected",
"version": "All Versions of Wiser Home Controller WHC-5918A"
}
],
"defaultStatus": "unaffected"
}
]Related
cve
cve
CVE-2024-6407
2024-07-11 10:15:02
nvd
nvd
CVE-2024-6407
2024-07-11 10:15:02
cvelist
cvelist
CVE-2024-6407
2024-07-11 09:07:40
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-6407