Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-21881

Aug. 12, 2024, 1:41 p.m.

Tags

CWE-326
2024-08-12
csirt@divd.nl
CVE-2024-21881

Product(s) Impacted

Envoy

  • 4.x
  • 5.x

Description

Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary OS Commands via encrypted package upload.This issue affects Envoy: 4.x and 5.x

Weaknesses

CWE-326
Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

CWE ID: 326

Date

Published: Aug. 12, 2024, 1:38 p.m.

Last Modified: Aug. 12, 2024, 1:41 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

csirt@divd.nl

References

https://csirt.divd.nl/ csirt@divd.nl
https://csirt.divd.nl/ csirt@divd.nl
https://enphase.com/ csirt@divd.nl