An incorrect authentication vulnerability has been found in Socomec Net Vision affecting version 7.20. This vulnerability allows an attacker to perform a brute force attack on the application and recover a valid session, because the application uses a five-digit integer value.
CVSS
No CVSS.
References
Configurations
No configuration.
History
07 May 2024, 13:39
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-07 12:15
Updated : 2024-05-07 13:39
NVD link : CVE-2024-4601
Mitre link : CVE-2024-4601
JSON object : View
Products Affected
No product.
CWE
CWE-287
Improper Authentication