Lucene search
TR-CERTVULNRICHMENT:CVE-2024-6921HistorySep 02, 2024 - 1:24 p.m.
CVE-2024-6921 Cleartext Username and Password in NAC Telecommunication's NACPremium
2024-09-0213:24:14
CWE-312
TR-CERT
github.com
2
cleartext storage
sensitive information
nac telecommunication
CVSS4
8.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
37.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Retrieve Embedded Sensitive Data.This issue affects NACPremium: through 01082024.
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:nac_telecommunication_systems:nacpremium:*:*:*:*:*:*:*:*"
],
"vendor": "nac_telecommunication_systems",
"product": "nacpremium",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "01082024"
}
],
"defaultStatus": "unknown"
}
]References
CVSS4
8.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
37.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2024-6921