PT-2024-37798 · Inohom · Inohom Nova Panel N7

Yunus Örnek · Published 2024-08-12 · Updated 2024-08-17 · CVE-2024-6684

Positive Technologies (AI Summary)

CVSS v4.0

9.9

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:H/S:P/AU:Y/R:U/U:Red

Name of the Vulnerable Software and Affected Versions inohom Nova Panel N7 versions through 1.9.9.6

Description The issue affects the inohom Nova Panel N7, allowing authentication bypass using an alternate path or channel. This enables unauthorized access. The vendor has stated that the product is not supported.

Recommendations For inohom Nova Panel N7 versions through 1.9.9.6, as the product is not supported, consider upgrading to a supported version or applying security controls to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2024-6684

Affected Products

Inohom Nova Panel N7

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-6684 · Security Note
• https://twitter.com/Aptallar09/status/1823024770059010308 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1194 · Note
• https://twitter.com/CVEnew/status/1822987109247934903 · Twitter Post
• https://twitter.com/CveFindCom/status/1822989215958716688 · Twitter Post
• https://t.me/cvenotify/90408 · Telegram Post
• https://usom.gov.tr/bildirim/tr-24-1194 · Note
• https://twitter.com/oktsec/status/1824736462606127257 · Twitter Post
• https://twitter.com/PorsilapongoCl/status/1822988946172703024 · Twitter Post