Unauthorized Access Vulnerability in Matrix Door Controller Cosec Vega FAXQ
CVE-2024-10381
9.8CRITICAL
What is CVE-2024-10381?
The Matrix Door Controller Cosec Vega FAXQ is susceptible to a vulnerability stemming from inadequate session management within its web-based management interface. This flaw allows a remote attacker to craft a specific HTTP request, potentially enabling them to gain unauthorized access to the device. If exploited, this vulnerability could provide the attacker with complete control over the compromised device, facilitating further malicious actions.
Affected Version(s)
Matrix Door Controller Cosec Vega FAXQ <V2R17
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
This vulnerability is reported by Arko Dhar and Souvik Kandar from Redinent Innovations Engineering & Research Team, Karnataka, India.