Weak Authentication Flaw in MSA FieldServer Gateway
CVE-2024-45494

Currently unrated

Key Information:

Vendor

MSA Safety

Status
FieldServer Gateway
Vendor
CVE Published:
10 December 2024

What is CVE-2024-45494?

The MSA FieldServer Gateway versions 5.0.0 to 6.5.2 possess a security flaw due to a weak authentication mechanism implemented through a globally shared administrative user account. This account uses a static shared secret across all affected firmware versions, making it vulnerable to exploitation. An attacker with knowledge of this secret can gain unauthorized access, potentially compromising device controls and sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://us.msasafety.com/fieldserver
https://us.msasafety.com/security-notices

Timeline

  • Vulnerability published

JSON
.