Back

CVE-2024-39220

July 3, 2024, 3:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

BAS-IP Intercom Systems

  • before firmware v3.9.2

Source

cve@mitre.org

Tags

cve@mitre.org
2024-07-03
CVE-2024-39220

CVE-2024-39220 details

Published : July 3, 2024, 3:15 p.m.
Last Modified : July 3, 2024, 3:15 p.m.

Description

BAS-IP AV-01D, AV-01MD, AV-01MFD, AV-01ED, AV-01KD, AV-01BD, AV-01KBD, AV-02D, AV-02IDE, AV-02IDR, AV-02IPD, AV-02FDE, AV-02FDR, AV-03D, AV-03BD, AV-04AFD, AV-04ASD, AV-04FD, AV-04SD, AV-05FD, AV-05SD, AA-07BD, AA-07BDI, BA-04BD, BA-04MD, BA-08BD, BA-08MD, BA-12BD, BA-12MD, CR-02BD before firmware v3.9.2 allows authenticated attackers to read SIP account passwords via a crafted GET request.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://bas-ip.com/bsa-000001 cve@mitre.org
https://github.com/DrieVlad/BAS-IP-vulnerabilities cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.