Today > 14 Critical | 48 High | 101 Medium | 16 Low vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-48455

Jan. 7, 2025, 10:15 p.m.

CVSS Score

2.7 / 10

Product(s) Impacted

Netis Wifi6 Router NX10

  • 2.0.1.3643
  • 2.0.1.3582

Netis Wifi 11AC Router NC65

  • 3.0.0.3749

Netis Wifi 11AC Router NC63

  • 3.0.0.3327
  • 3.0.0.3503

Netis Wifi 11AC Router NC21

  • 3.0.0.3800
  • 3.0.0.3500
  • 3.0.0.3329

Netis Wifi Router MW5360

  • 1.0.1.3442
  • 1.0.1.3031

Description

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a remote attacker to obtain sensitive information via the mode_name, wl_link parameters of the skk_get.cgi component.

Weaknesses

Date

Published: Jan. 6, 2025, 10:15 p.m.

Last Modified: Jan. 7, 2025, 10:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

Base Score
2.7
Exploitability Score
1.2
Impact Score
1.4
Base Severity
LOW
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

References

https://github.com/ cve@mitre.org

https://github.com/ 134c704f-9b21-4f2e-91b3-4a467353bcc0