CVE-2024-39771

Description

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack.

Reserved 2024-08-15 | Published 2024-08-28 | Updated 2024-10-28 | Assigner jpcert

Problem types

Improper certificate validation

Product status

v1.1.30 and earlier
affected

v1.8.2 and earlier
affected

References

safie.jp/information/post_6933/

jvn.jp/en/jp/JVN83440451/

cve.org (CVE-2024-39771)

nvd.nist.gov (CVE-2024-39771)

Download JSON