Improper Authorization Vulnerability in Altenergy Power Control Software
CVE-2024-11306
Key Information:
- Vendor
Altenergy
- Status
- Vendor
- CVE Published:
- 18 November 2024
Badges
What is CVE-2024-11306?
A significant vulnerability has been identified in the Altenergy Power Control Software, specifically affecting versions up to 20241108. This vulnerability is caused by improper authorization mechanisms linked to the file path /index.php/display/database/. This flaw allows an attacker to potentially exploit the system remotely, gaining unauthorized access to sensitive internal data. The implications of this vulnerability are considerable, as it may also affect other endpoints within the network. The vendor has been alerted about this serious issue; however, there has been no response or remediation action taken to address the vulnerability. Organizations utilizing this software are advised to assess their exposure and implement mitigation strategies promptly.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Power Control Software 20241108
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved