CVE-2024-8891 in Q-SMTinfo

Zusammenfassung

von MITRE • 18.09.2024

An attacker with no knowledge of the current users in the web application, could build a dictionary of potential users and check the server responses as it indicates whether or not the user is present in CIRCUTOR Q-SMT in its firmware version 1.0.4.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

INCIBE

Reservieren

16.09.2024

Veröffentlichung

18.09.2024

Moderieren

akzeptiert

Eintrag

VDB-277999

CPE

bereit

EPSS

0.00239

KEV

nein

Aktivitäten

very low

Quellen

Do you know our Splunk app?

Download it now for free!