PT-2024-16778 · Unknown · Digistar Ag-30 Plus

W0T4N · Published 2024-11-12 · Updated 2024-11-12 · CVE-2024-11126

Positive Technologies (AI Summary)

CVSS v2.0

1.8

Low

Base vector

AV:A/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Digistar AG-30 Plus version 2.6b

Description A vulnerability was found in the Login Page component, leading to improper restriction of excessive authentication attempts. The complexity of an attack is rather high, and the exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Recommendations For version 2.6b, as a temporary workaround, consider restricting access to the Login Page or implementing additional authentication measures to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

CWE-799

Related Identifiers

CVE-2024-11126

Affected Products

Digistar Ag-30 Plus

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-11126 · Security Note
• https://vuldb.com/?id.283974 · Note
• https://vuldb.com/?submit.437096 · Note
• https://t.me/cvedetector/10633 · Telegram Post
• https://vuldb.com/?ctiid.283974 · Note
• https://twitter.com/CVEnew/status/1856349123542163884 · Twitter Post
• https://t.me/cvenotify/101395 · Telegram Post