CVE-2024-21872

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-21872
The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter.
CVSS

No CVSS.

References
Link Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
Configurations

No configuration.

History

28 May 2024, 17:15

Type Values Removed Values Added
Summary The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter. The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter.

18 Apr 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-18 23:15

Updated : 2024-05-28 17:15

NVD link : CVE-2024-21872

Mitre link : CVE-2024-21872

JSON object : View

Products Affected

No product.

CWE
CWE-565

Reliance on Cookies without Validation and Integrity Checking