CVEvulnerability
CVE-2024-4225
7.6 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2024-04-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.6 HIGH — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- Weaknesses
- CWE-284
Description
Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html govtech-csg.github.io
- https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html govtech-csg.github.io