← Back

CVE-2024-8891

nvd nist
Published: Sep 18, 2024Modified: Sep 26, 2024

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

An attacker with no knowledge of the current users in the web application, could build a dictionary of potential users and check the server responses as it indicates whether or not the user is present in CIRCUTOR Q-SMT in its firmware version 1.0.4.

Affected (1)

Circutor
1 product
Q Smt Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Q Smt Firmware
Version 1.0.4
Running on/withPlatform Versions
Circutor
Q Smt
All versions

Related CWEs

CWE-359
Exposure of Private Personal Information to an Unauthorized Actor
The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

References (1)

Source: cve-coordination@incibe.es
Third Party Advisory

Timeline

No history available yet.