CVE-2024-22894 in Heatpump

Tóm tắt

Bởi MITRE • 30/01/2024

An issue in AIT-Deutschland Alpha Innotec Heatpumps wp2reg-V.3.88.0-9015 and Novelan Heatpumps wp2reg-V.3.88.0-9015, allows remote attackers to execute arbitrary code via the password component in the shadow file.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Đặt trước: 11/01/2024
• Tiết lộ: 30/01/2024
• Kiểm duyệt: được chấp nhận
• mục: VDB-252390
• CPE: sẵn sàng
• CWE: CWE-326 (Đã xác nhận)
• CVSS: 6.8 (NVD)
• EPSS: 0.00731
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-22894
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-22894
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-22894/