Podatność CVE-2024-38284
Publikacja: 2024-06-13

Opis:
Transmitted data is logged between the device and the backend service. An attacker could use these logs to perform a replay attack to replicate calls.

Typ:

CWE-294

 (Authentication Bypass by Capture-replay)

 Referencje:
https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19
Copyright 2024, cxsecurity.com

 

Back to Top