PT-2024-28929 · Pentaminds · Pentaminds Curovms

Published 2024-12-09 · Updated 2024-12-11 · CVE-2024-40583

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pentaminds CuroVMS version 2.0.1

Description The issue is related to exposed credentials in the software. This means that sensitive information, such as passwords or other authentication data, is not properly secured and can be accessed by unauthorized parties.

Recommendations For Pentaminds CuroVMS version 2.0.1, consider changing all exposed credentials and restricting access to sensitive areas of the system until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2024-40583

Affected Products

Pentaminds Curovms

References · 9

• 🔥 https://medium.com/@vishnuchttrj/exploiting-vms-vulnerabilities-to-access-confidential-data-cve-2024-40582-cve-2024-40583-60d957933b78 · Exploit
• https://osv.dev/vulnerability/CVE-2024-40583 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40583 · Security Note
• https://t.me/cvenotify/103556 · Telegram Post
• https://twitter.com/CVEnew/status/1866432955398168614 · Twitter Post
• http://curovms.com · Note
• https://twitter.com/VulmonFeeds/status/1866300060410974470 · Twitter Post
• https://t.me/cvedetector/12411 · Telegram Post
• http://pentaminds.com · Note