Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-31415

Опубликовано: 13 сент. 2024
Источник: nvd
CVSS3: 6.3
CVSS3: 8.1
EPSS Низкий

Описание

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encryption were insecurely stored, which could be abused to possibly change or remove the server configuration.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:eaton:foreseer_electrical_power_monitoring_system:*:*:*:*:*:*:*:*
Версия до 7.8.600 (исключая)

EPSS

Процентиль: 20%
0.00063
Низкий

6.3 Medium

CVSS3

8.1 High

CVSS3

Дефекты

CWE-312
CWE-522

Связанные уязвимости

CVSS3: 6.3
github
больше 1 года назад

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encryption were insecurely stored, which could be abused to possibly change or remove the server configuration.

EPSS

Процентиль: 20%
0.00063
Низкий

6.3 Medium

CVSS3

8.1 High

CVSS3

Дефекты

CWE-312
CWE-522