CVE-2024-0860 | THREATINT

Description

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker to capture packets to craft their own requests.

Reserved 2024-01-24 | Published 2024-03-14 | Updated 2024-08-12 | Assigner icscert

HIGH: 8.0CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-319 Cleartext Transmission of Sensitive Information

Product status

Default status

unaffected

Version 3.60

affected

Default status

unaffected

Version 3.60

affected

Credits

Pan ZhenPeng (@Peterpan0927) and Li JianTao (@CurseRed) of STAR Labs SG Pte. Ltd. (@starlabs_sg) working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA. Claroty Team82 working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA finder

References

www.cisa.gov/news-events/ics-advisories/icsa-24-074-13 government-resource

cve.org (CVE-2024-0860)

nvd.nist.gov (CVE-2024-0860)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.