VULNERABILITY INTELLIGENCE
CVE-2024-36497
CVSS score9.1 CRITICAL
EPSS probability0.46%
CISA KEVNot currently listed
Published2024-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
The decrypted configuration file contains the password in cleartext which is used to configure WINSelect. It can be used to remove the existing restrictions and disable WINSelect entirely.
Weakness classification
- 551230f0-3615-47bd-b7cc-93e92e730bbf: CWE-312