PT-2024-20073 · Sdm600 · Sdm600

Published 2024-04-30 · Updated 2024-05-01 · CVE-2024-2377

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SDM600 (affected versions not specified)

Description A vulnerability exists in the too permissive HTTP response header web server settings. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2024-2377

Affected Products

Sdm600

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-2377 · Security Note
• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000191&languageCode=en&Preview=true · Note
• https://t.me/cvenotify/78586 · Telegram Post
• https://twitter.com/cracbot/status/1785612305943629914 · Twitter Post
• https://twitter.com/linuxpatch/status/1785309638792987112 · Twitter Post
• https://twitter.com/CVEnew/status/1785297216724238538 · Twitter Post