Local Information Disclosure in Tenda Technology CP3V2.0 Router
CVE-2024-24488
5.5MEDIUM
Summary
A security vulnerability in the Shenzen Tenda Technology CP3V2.0 router enables a local attacker to access sensitive information through exploitation of the router's password component. This flaw could potentially expose user credentials and other confidential data, posing a significant risk to the security and privacy of affected users. It is crucial for users of this product version to apply security updates promptly to mitigate any potential exploits.
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved