VULNERABILITY INTELLIGENCE
CVE-2024-28275
CVSS score6.5 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2024-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
Puwell Cloud Tech Co, Ltd 360Eyes Pro v3.9.5.16(3090516) was discovered to transmit sensitive information in cleartext. This vulnerability allows attackers to intercept and access sensitive information, including users' credentials and password change requests.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-319