ByteOS Network

NVD Vulnerability Details :

CVE-2024-3122

Deferred

Source-twcert@cert.org.tw

Published At-01 Jul, 2024 | 05:15

Updated At-15 Apr, 2026 | 00:35

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	4.9	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 4.9

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE ID	Type	Source
CWE-23	Secondary	twcert@cert.org.tw

CWE ID: CWE-23

Type: Secondary

Source: twcert@cert.org.tw

References

Hyperlink	Source	Resource
https://www.twcert.org.tw/en/cp-139-7912-4c800-2.html	twcert@cert.org.tw	N/A
https://www.twcert.org.tw/tw/cp-132-7911-0962e-1.html	twcert@cert.org.tw	N/A
https://www.twcert.org.tw/en/cp-139-7912-4c800-2.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.twcert.org.tw/tw/cp-132-7911-0962e-1.html	af854a3a-2127-422b-91ae-364da2661108	N/A