PT-2024-29805 · Unknown · Netguardian Din Remote Telemetry Unit

Goh Jing Loon + 1 · Published 2024-04-30 · Updated 2024-05-01 · CVE-2024-4225

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions NetGuardian DIN Remote Telemetry Unit (RTU) (affected versions not specified)

Description The issue concerns multiple security vulnerabilities in the web interface of the NetGuardian DIN Remote Telemetry Unit (RTU). Attackers can exploit these vulnerabilities to perform critical actions such as escalating user privileges, stealing user credentials, Cross Site Scripting (XSS), and Cross-Site Request Forgery (CSRF).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2024-4225

Affected Products

Netguardian Din Remote Telemetry Unit

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-4225 · Security Note
• https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html · Note
• https://t.me/cvenotify/78504 · Telegram Post
• https://twitter.com/CVEnew/status/1785206390694527142 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1785257197066199079 · Twitter Post
• https://twitter.com/linuxpatch/status/1785385085446889875 · Twitter Post
• https://twitter.com/cracbot/status/1785612286989672827 · Twitter Post
• https://twitter.com/linuxpatch/status/1785219009887051989 · Twitter Post