VULNERABILITY INTELLIGENCE
CVE-2024-2412
CVSS score5.3 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2024-03-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled.
Weakness classification
- twcert@cert.org.tw: CWE-1220