VULNERABILITY INTELLIGENCE

CVE-2024-10381

CVSS score9.8 CRITICAL
EPSS probability0.87%
CISA KEVNot currently listed
Published2024-10-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

This vulnerability exists in Matrix Door Controller Cosec Vega FAXQ due to improper implementation of session management at the web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the vulnerable device. Successful exploitation of this vulnerability could allow remote attacker to gain unauthorized access and take complete control of the targeted device.

Weakness classification

  • vdisclose@cert-in.org.in: CWE-288
  • nvd@nist.gov: NVD-CWE-Other

Primary references