PT-2024-22335 · N-Central · N-Central

Aaron Miller · Published 2024-07-01 · Updated 2025-12-24 · CVE-2024-28200

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions N-central versions prior to 2024.2

Description The issue concerns an authentication bypass of the user interface. It was discovered through an internal source code review, and there have been no observed exploitations in the wild.

Recommendations For versions prior to 2024.2, update to version 2024.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the user interface until the update can be applied.

Fix

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Weakness Enumeration

CWE-288

CWE-287

Related Identifiers

CVE-2024-28200

Affected Products

N-Central

References · 7

• https://documentation.n-able.com/N-central/Release_Notes/GA/Content/2024.2%20Release%20Notes.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-28200 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28200 · Vendor Advisory
• https://twitter.com/pdnuclei_bot/status/2003722341675872328 · Twitter Post
• https://t.me/cvenotify/91717 · Telegram Post
• https://me.n-able.com/s/security-advisory/aArVy0000000673KAA/cve202428200-ncentral-authentication-bypass · Note
• https://t.me/cvenotify/84952 · Telegram Post