CVE-2024-38465

Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.
Configurations

Configuration 1 (hide)

cpe:2.3:a:guoxinled:synthesis_image_system:*:*:*:*:*:*:*:*

History

07 Aug 2024, 17:57

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
References () https://github.com/Pumpkin-ito/Cve-Vuln/blob/main/Guosen%20synthetic%20imaging%20system%20vulnerability.pdf - () https://github.com/Pumpkin-ito/Cve-Vuln/blob/main/Guosen%20synthetic%20imaging%20system%20vulnerability.pdf - Broken Link
CWE CWE-203
First Time Guoxinled
Guoxinled synthesis Image System
CPE cpe:2.3:a:guoxinled:synthesis_image_system:*:*:*:*:*:*:*:*

16 Jun 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-16 16:15

Updated : 2025-03-14 01:15


NVD link : CVE-2024-38465

Mitre link : CVE-2024-38465


JSON object : View

Products Affected

guoxinled

  • synthesis_image_system
CWE
CWE-203

Observable Discrepancy