VULNERABILITY INTELLIGENCE

CVE-2024-8887

CVSS score10 CRITICAL
EPSS probability0.56%
CISA KEVNot currently listed
Published2024-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service (DoS) attack if an attacker with access to the web service bypasses the authentication mechanisms on the login page, allowing the attacker to use all the functionalities implemented at web level that allow interacting with the device.

Weakness classification

  • cve-coordination@incibe.es: CWE-1284
  • nvd@nist.gov: CWE-1284

Primary references