Podatność CVE-2024-35294
Publikacja: 2024-10-02

Opis:
An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials.

Typ:

CWE-306

 (Missing Authentication for Critical Function)

 Referencje:
https://www.schneider-elektronik.de/wp-content/uploads/2024/07/SAR-202405-2.pdf
Copyright 2024, cxsecurity.com

 

Back to Top