CVE-2024-22894 in Heatpump

Sumário

de MITRE • 30/01/2024

An issue in AIT-Deutschland Alpha Innotec Heatpumps wp2reg-V.3.88.0-9015 and Novelan Heatpumps wp2reg-V.3.88.0-9015, allows remote attackers to execute arbitrary code via the password component in the shadow file.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 11/01/2024
• Divulgação: 30/01/2024
• Moderação: aceite
• Entrada: VDB-252390
• CPE: pronto
• CWE: CWE-326 (confirmado)
• CVSS: 6.8 (NVD)
• EPSS: 0.00731
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-22894
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-22894
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-22894/