CVE-2024-4225

Published: Apr 30, 2024Modified: Nov 21, 2024

7.6

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Exploitability: 2.1 / Impact: 5.5

Source: cve_disclosure@tech.gov.sg (Secondary)

Description

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html

Source: cve_disclosure@tech.gov.sg

https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.