CVE-2024-39771
6.8
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 1.6 / Impact: 5.2
Source: NVD
Description
QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack.
Affected (2)
Products: Safie: Qbic Cloud Cc 2/2l Firmware, Safie One Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.1.30 |
| Running on/with | Platform Versions |
|---|---|
Safie Qbic Cloud Cc 2/2l | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.8.2 |
| Running on/with | Platform Versions |
|---|---|
Safie Safie One | All versions |
References (2)
Timeline
No history available yet.