PT-2024-17404 · Xpodas · Octopod

Efe Özel + 2 · Published 2024-03-05 · Updated 2024-08-01 · CVE-2024-1202

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Octopod versions prior to v1

Description The issue affects XPodas Octopod, allowing authentication bypass by primary weakness. This vulnerability enables unauthorized access. The vendor was contacted, and it was learned that the product is not supported.

Recommendations For versions prior to v1, since the product is not supported, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-305

Related Identifiers

CVE-2024-1202

Affected Products

Octopod

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-1202 · Security Note
• https://twitter.com/cracbot/status/1771321495572070739 · Twitter Post
• https://usom.gov.tr/bildirim/tr-24-0174 · Note
• https://twitter.com/CVEnew/status/1765027645383987381 · Twitter Post