Local Information Disclosure in Tenda Technology CP3V2.0 Router
CVE-2024-24488

5.5MEDIUM

Key Information:

Vendor
Tenda
Vendor
CVE Published:
7 February 2024

Summary

A security vulnerability in the Shenzen Tenda Technology CP3V2.0 router enables a local attacker to access sensitive information through exploitation of the router's password component. This flaw could potentially expose user credentials and other confidential data, posing a significant risk to the security and privacy of affected users. It is crucial for users of this product version to apply security updates promptly to mitigate any potential exploits.

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.