PT-2024-34619 · Altai · Altai Ix500 Indoor 22 802.11Ac Wave 2 Ap

Published 2024-11-01 · Updated 2024-11-05 · CVE-2024-51399

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Altai IX500 Indoor 22 802.11ac Wave 2 AP (affected versions not specified)

Description The issue allows attackers to obtain sensitive information such as user credentials, system configuration, and database connection strings after login, due to unauthorized file reads in the background. This can lead to data breaches and identity theft.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2024-51399

Affected Products

Altai Ix500 Indoor 22 802.11Ac Wave 2 Ap

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-51399 · Security Note
• https://github.com/HuhaiOvO/Altai/blob/main/Altai%20IX500%20Indoor%202%C3%972%20802.11ac%20Wave%202%20AP%20file%20read.docx · Note
• https://t.me/cvedetector/9604 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1852546969643667942 · Twitter Post
• https://twitter.com/CVEnew/status/1852495995843510477 · Twitter Post