ByteOS Network

CVE Vulnerability Details :

CVE-2024-2371

PUBLISHED

More Info Official Page

Assigner-INCIBE

Assigner Org ID-0cbda920-cd7f-484a-8e76-bf7f4b7f4516

Published At-12 Mar, 2024 | 08:49

Updated At-01 Aug, 2024 | 19:11

▼CVE Numbering Authority (CNA)

Information exposure vulnerability in Korenix JetI/O 6550

Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials.

Affected Products

Vendor

Korenix

Product

JetI/O 6550

Default Status

unaffected

Versions

Affected

F208 Build:0817

Problem Types

Type	CWE ID	Description
CWE	CWE-200	CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Metrics

Version	Base score	Base severity	Vector
3.1	6.2	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impacts

CAPEC ID	Description
CAPEC-59	CAPEC-59 Session Credential Falsification through Prediction

Solutions

There is no reported solution at this time.

Credits

finder

HADESS

References

Hyperlink	Resource
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/information-exposure-vulnerability-korenix-jetio-6550	N/A

▼Authorized Data Publishers (ADP)

1. CISA ADP Vulnrichment

Metrics Other Info

2. CVE Program Container

References

Hyperlink	Resource
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/information-exposure-vulnerability-korenix-jetio-6550	x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References