Netgsm Missing Authorization Vulnerability Affects Versions 2.9.16
CVE-2024-35672

9.8CRITICAL

Key Information:

Vendor

WordPress
Status
Netgsm
Vendor
CVE Published:
4 June 2024

What is CVE-2024-35672?

An authorization flaw has been identified in the Netgsm product, which can potentially allow unauthorized users to access restricted functionalities. This vulnerability affects all versions of Netgsm up to and including version 2.9.19, leading to risks that could compromise user data integrity and application performance. It is crucial for users and administrators of Netgsm software to be aware of this vulnerability and take appropriate security measures to mitigate the risks.

Affected Version(s)

Netgsm <= 2.9.19

References

https://patchstack.com/database/vulnerability/netgsm/word...
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Credit

Majed Refaea (Patchstack Alliance)
.