Improper Sensitive Information Management in Product by Vendor
CVE-2024-43384
8HIGH
What is CVE-2024-43384?
A vulnerability exists that allows a low privileged remote attacker to gain unauthorized access to the root password due to the improper removal of sensitive information prior to its storage or transfer. This security flaw can potentially lead to serious breaches if exploited, as attackers can manipulate how sensitive data is handled, compromising the integrity and security of the affected system.
Affected Version(s)
FL MGUARD 2102 0 < 10.4.1
FL MGUARD 2105 0 < 10.4.1
FL MGUARD 4102 PCI 0 < 10.4.1
References
CVSS V3.1
Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Andrea Palanca
Nozomi Networks Security Research Team