PT-2024-35596 · Schneider Electric · Evlink Home Smart+1

Published 2024-06-12 · Updated 2024-08-14 · CVE-2024-5313

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A vulnerability exists that exposes a SSH interface over the product network interface. This exposure does not allow for direct exploitation of the product or unintended operations, as the SSH interface access is protected by an authentication mechanism. The impacts are limited to port scanning and fingerprinting activities, as well as attempts to perform a potential denial of service attack on the exposed SSH interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2024-5313

Affected Products

Evlink Home Smart

Evlink Home Firmware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-5313 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-03.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-5313 · Vendor Advisory
• https://t.me/cvenotify/90515 · Telegram Post
• https://t.me/cvenotify/83002 · Telegram Post