CVE-2023-24498

Summary

An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the password to the switch in clear text.

Affected Software

Weaknesses

• CWE-522: CWE-522 Insufficiently Protected Credentials

ADP Enrichment

CVE Program Container

Additional References

• https://www.gov.il/en/Departments/faq/cve_advisories

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.gov.il/en/Departments/faq/cve_advisories

• ←Previous
• Next→