VULNERABILITY INTELLIGENCE
CVE-2024-22179
CVSS score7.5 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2024-04-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-302