PT-2025-2581 · Aginode · Aginode Gigaswitch

Christophe Hugueny + 1 · Published 2025-01-15 · Updated 2025-01-16 · CVE-2024-39967

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Aginode GigaSwitch version v5

Description The issue allows attackers to access sensitive information via the use of the SCP command due to insecure permissions.

Recommendations For Aginode GigaSwitch version v5, consider restricting access to the SCP command as a temporary workaround until a patch is available.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2024-39967

Affected Products

Aginode Gigaswitch

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-39967 · Security Note
• https://t.me/cvenotify/107592 · Telegram Post
• https://twitter.com/CVEnew/status/1879858796631376163 · Twitter Post
• https://blog.hackvens.fr/advisories/CVE-2024-39967-CVE-2024-39219-GigaSwitch.html · Note
• https://twitter.com/VulmonFeeds/status/1879843492312080697 · Twitter Post
• https://t.me/cvedetector/15545 · Telegram Post