CVE-2024-36080 in EDW-100 devices

Сводка

по MITRE • 19.05.2024

Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Ответственный: MITRE
• Раскрытие: 19.05.2024
• Модерация: принято
• Вход: VDB-265209
• CPE: готов
• CWE: CWE-259 (Подтверждённый)
• CVSS: 9.8 (CNA)
• EPSS: 0.00551
• KEV: Нет
• Деятельности: Очень низкий

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-36080
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-36080
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-36080/