CVE-2024-1223

Published Mar 14, 2024

Last updated a month ago

Overview

Description
This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack to be successful the system must be in a specific runtime state.
Source
eb41dac7-0af8-4f84-9f6d-0272772514f4
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
4.8
Impact score
2.5
Exploitability score
2.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity
MEDIUM

Weaknesses

eb41dac7-0af8-4f84-9f6d-0272772514f4
CWE-488
nvd@nist.gov
NVD-CWE-Other

Social media

Hype score
Not currently trending

Configurations