CVE-2024-24300
Critical
Description
4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set of credentials, regardless of how many times a user logs in, the content of the cookie remains unchanged.
SeverityCritical
CVSS9.8
Exploit probability—
Product4ipnet Eap-767 Firmware
PublishedFeb 14, 2024
First seenFeb 14, 2024
Weakness typeCWE-284Improper access control
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 4ipnet eap-767_firmware | 3.42.00 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.