CVE-2024-24721

Katalog CVE

CVSS 6.5 · Medium EPSS 0,31%

Kerentanan Improper Restriction of Excessive Authentication Attempts pada innovaphone pbx. Skor CVSS 3.1 6.5 (Medium) menurut CISA ADP.

Deskripsi (NVD)

An issue was discovered on Innovaphone PBX before 14r1 devices. The password form, used to authenticate, allows a Brute Force Attack through which an attacker may be able to access the administration panel

Rincian

Terbit di NVD

27 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-307: Improper Restriction of Excessive Authentication Attempts

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2024-24721 advisory pihak ketiga
• https://excellium-services.com/cert-xlm-advisory/CVE-2024-24721 not applicable