Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-10381

Опубликовано: 25 окт. 2024
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

This vulnerability exists in Matrix Door Controller Cosec Vega FAXQ due to improper implementation of session management at the web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the vulnerable device.

Successful exploitation of this vulnerability could allow remote attacker to gain unauthorized access and take complete control of the targeted device.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:matrixcomsec:cosec_vega_faxq_firmware:*:*:*:*:*:*:*:*
Версия до v2r17 (исключая)
cpe:2.3:h:matrixcomsec:cosec_vega_faxq:-:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.0114
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-288
NVD-CWE-Other

Связанные уязвимости

CVSS3: 9.8
github
больше 1 года назад

This vulnerability exists in Matrix Door Controller Cosec Vega FAXQ due to improper implementation of session management at the web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the vulnerable device. Successful exploitation of this vulnerability could allow remote attacker to gain unauthorized access and take complete control of the targeted device.

EPSS

Процентиль: 78%
0.0114
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-288
NVD-CWE-Other