CVE-2024-22179 - Vulnerability Details - OpenCVE

The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentials to blank giving her access to the admin panel. Also vulnerable to account takeover and arbitrary password change.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02

History

No history.

MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2024-04-18T22:06:26.781Z

Updated: 2024-08-01T22:35:34.937Z

Reserved: 2024-01-05T22:07:42.998Z

Link: CVE-2024-22179

Vulnrichment

Updated: 2024-08-01T22:35:34.937Z

NVD

Status : Awaiting Analysis

Published: 2024-04-18T22:15:09.850

Modified: 2024-11-21T08:55:44.090

Link: CVE-2024-22179

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-22179", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "state": "PUBLISHED", "assignerShortName": "icscert", "dateReserved": "2024-01-05T22:07:42.998Z", "datePublished": "2024-04-18T22:06:26.781Z", "dateUpdated": "2024-08-01T22:35:34.937Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Compact DAB Transmitter", "vendor": "Electrolink", "versions": [{"status": "affected", "version": "10W"}, {"status": "affected", "version": "100W"}, {"status": "affected", "version": "250W"}]}, {"defaultStatus": "unaffected", "product": "Medium DAB Transmitter", "vendor": "Electrolink", "versions": [{"status": "affected", "version": "500W"}, {"status": "affected", "version": "1kW"}, {"status": "affected", "version": "2kW"}]}, {"defaultStatus": "unaffected", "product": "High Power DAB Transmitter", "vendor": "Electrolink", "versions": [{"status": "affected", "version": "2.5kW"}, {"status": "affected", "version": "3kW"}, {"status": "affected", "version": "4kW"}, {"status": "affected", "version": "5kW"}]}, {"defaultStatus": "unaffected", "product": "Compact FM Transmitter", "vendor": "Electrolink", "versions": [{"status": "affected", "version": "Compact FM Transmitter"}, {"status": "affected", "version": "500W"}, {"status": "affected", "version": "1kW"}, {"status": "affected", "version": "2kW"}]}, {"defaultStatus": "unaffected", "product": "Modular FM Transmitter", "vendor": "Electrolink", "versions": [{"status": "affected", "version": "3kW"}, {"status": "affected", "version": "5kW"}, {"status": "affected", "version": "10kW"}, {"status": "affected", "version": "15kW"}, {"status": "affected", "version": "20kW"}, {"status": "affected", "version": "30kW"}]}, {"defaultStatus": "unaffected", "product": "Digital FM Transmitter", "vendor": "Electrolink", "versions": [{"lessThanOrEqual": "40kW", "status": "affected", "version": "15W", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "VHF TV Transmitter", "vendor": "Electrolink", "versions": [{"status": "affected", "version": "BI"}, {"status": "affected", "version": "BIII"}]}, {"defaultStatus": "unaffected", "product": "UHF TV Transmitter", "vendor": "Electrolink", "versions": [{"lessThanOrEqual": "5kW", "status": "affected", "version": "10W", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Gjoko Krstic publicly reported these vulnerabilities on the internet after an unsuccessful attempt to contact Electrolink directly."}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change."}], "value": "The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 8.7, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-302", "description": "CWE-302", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2024-05-28T16:45:02.057Z"}, "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"}], "source": {"advisory": "ICSA-24-107-02", "discovery": "EXTERNAL"}, "title": "Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Electrolink has not responded to requests to work with CISA to mitigate \nthese vulnerabilities. Users of the affected products are encouraged to \ncontact <a target=\"_blank\" rel=\"nofollow\" href=\"https://electrolink.com/contacts/\">Electrolink</a> for additional information.\n\n<br>"}], "value": "Electrolink has not responded to requests to work with CISA to mitigate \nthese vulnerabilities. Users of the affected products are encouraged to \ncontact Electrolink https://electrolink.com/contacts/ for additional information."}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "electrolink", "product": "compact dab transmitter", "cpes": ["cpe:2.3:a:electrolink:compact_dab_transmitter:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "10w", "status": "affected"}, {"version": "100w", "status": "affected"}, {"version": "250w", "status": "affected"}]}, {"vendor": "electrolink", "product": "medium dab transmitter", "cpes": ["cpe:2.3:a:electrolink:medium_dab_transmitter:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "500w", "status": "affected"}, {"version": "1kw", "status": "affected"}, {"version": "2kw", "status": "affected"}]}, {"vendor": "electrolink", "product": "high power dab transmitter", "cpes": ["cpe:2.3:a:electrolink:high_power_dab_transmitter:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2.5kw", "status": "affected"}, {"version": "3kw", "status": "affected"}, {"version": "4kw", "status": "affected"}, {"version": "5kw", "status": "affected"}]}, {"vendor": "electrolink", "product": "compact fm transmitter", "cpes": ["cpe:2.3:a:electrolink:compact_fm_transmitter:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "500w", "status": "affected"}, {"version": "1kw", "status": "affected"}, {"version": "2kw", "status": "affected"}]}, {"vendor": "electrolink", "product": "modular fm transmitter", "cpes": ["cpe:2.3:a:electrolink:modular_fm_transmitter:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "3kw", "status": "affected"}, {"version": "5kw", "status": "affected"}, {"version": "10kw", "status": "affected"}, {"version": "15kw", "status": "affected"}, {"version": "20kw", "status": "affected"}, {"version": "30kw", "status": "affected"}]}, {"vendor": "electrolink", "product": "digital fm transmitter", "cpes": ["cpe:2.3:a:electrolink:digital_fm_transmitter:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "15w", "status": "affected", "lessThanOrEqual": "40kw", "versionType": "custom"}]}, {"vendor": "electrolink", "product": "vhf tv transmitter", "cpes": ["cpe:2.3:a:electrolink:vhf_tv_transmitter:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "bi", "status": "affected"}, {"version": "biii", "status": "affected"}]}, {"vendor": "electrolink", "product": "uhf tv transmitter", "cpes": ["cpe:2.3:a:electrolink:uhf_tv_transmitter:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "10w", "status": "affected", "lessThanOrEqual": "5kw", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-16T14:46:38.775197Z", "id": "CVE-2024-22179", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-16T15:05:06.230Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:35:34.937Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:35:34.937Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-22179", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-16T14:46:38.775197Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:electrolink:compact_dab_transmitter:*:*:*:*:*:*:*:*"], "vendor": "electrolink", "product": "compact dab transmitter", "versions": [{"status": "affected", "version": "10w"}, {"status": "affected", "version": "100w"}, {"status": "affected", "version": "250w"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:electrolink:medium_dab_transmitter:*:*:*:*:*:*:*:*"], "vendor": "electrolink", "product": "medium dab transmitter", "versions": [{"status": "affected", "version": "500w"}, {"status": "affected", "version": "1kw"}, {"status": "affected", "version": "2kw"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:electrolink:high_power_dab_transmitter:*:*:*:*:*:*:*:*"], "vendor": "electrolink", "product": "high power dab transmitter", "versions": [{"status": "affected", "version": "2.5kw"}, {"status": "affected", "version": "3kw"}, {"status": "affected", "version": "4kw"}, {"status": "affected", "version": "5kw"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:electrolink:compact_fm_transmitter:*:*:*:*:*:*:*:*"], "vendor": "electrolink", "product": "compact fm transmitter", "versions": [{"status": "affected", "version": "500w"}, {"status": "affected", "version": "1kw"}, {"status": "affected", "version": "2kw"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:electrolink:modular_fm_transmitter:*:*:*:*:*:*:*:*"], "vendor": "electrolink", "product": "modular fm transmitter", "versions": [{"status": "affected", "version": "3kw"}, {"status": "affected", "version": "5kw"}, {"status": "affected", "version": "10kw"}, {"status": "affected", "version": "15kw"}, {"status": "affected", "version": "20kw"}, {"status": "affected", "version": "30kw"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:electrolink:digital_fm_transmitter:*:*:*:*:*:*:*:*"], "vendor": "electrolink", "product": "digital fm transmitter", "versions": [{"status": "affected", "version": "15w", "versionType": "custom", "lessThanOrEqual": "40kw"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:electrolink:vhf_tv_transmitter:*:*:*:*:*:*:*:*"], "vendor": "electrolink", "product": "vhf tv transmitter", "versions": [{"status": "affected", "version": "bi"}, {"status": "affected", "version": "biii"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:electrolink:uhf_tv_transmitter:*:*:*:*:*:*:*:*"], "vendor": "electrolink", "product": "uhf tv transmitter", "versions": [{"status": "affected", "version": "10w", "versionType": "custom", "lessThanOrEqual": "5kw"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-16T15:04:56.293Z"}}], "cna": {"title": "Electrolink FM/DAB/TV Transmitter Authentication Bypass by Assumed-Immutable Data", "source": {"advisory": "ICSA-24-107-02", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Gjoko Krstic publicly reported these vulnerabilities on the internet after an unsuccessful attempt to contact Electrolink directly."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Electrolink", "product": "Compact DAB Transmitter", "versions": [{"status": "affected", "version": "10W"}, {"status": "affected", "version": "100W"}, {"status": "affected", "version": "250W"}], "defaultStatus": "unaffected"}, {"vendor": "Electrolink", "product": "Medium DAB Transmitter", "versions": [{"status": "affected", "version": "500W"}, {"status": "affected", "version": "1kW"}, {"status": "affected", "version": "2kW"}], "defaultStatus": "unaffected"}, {"vendor": "Electrolink", "product": "High Power DAB Transmitter", "versions": [{"status": "affected", "version": "2.5kW"}, {"status": "affected", "version": "3kW"}, {"status": "affected", "version": "4kW"}, {"status": "affected", "version": "5kW"}], "defaultStatus": "unaffected"}, {"vendor": "Electrolink", "product": "Compact FM Transmitter", "versions": [{"status": "affected", "version": "Compact FM Transmitter"}, {"status": "affected", "version": "500W"}, {"status": "affected", "version": "1kW"}, {"status": "affected", "version": "2kW"}], "defaultStatus": "unaffected"}, {"vendor": "Electrolink", "product": "Modular FM Transmitter", "versions": [{"status": "affected", "version": "3kW"}, {"status": "affected", "version": "5kW"}, {"status": "affected", "version": "10kW"}, {"status": "affected", "version": "15kW"}, {"status": "affected", "version": "20kW"}, {"status": "affected", "version": "30kW"}], "defaultStatus": "unaffected"}, {"vendor": "Electrolink", "product": "Digital FM Transmitter", "versions": [{"status": "affected", "version": "15W", "versionType": "custom", "lessThanOrEqual": "40kW"}], "defaultStatus": "unaffected"}, {"vendor": "Electrolink", "product": "VHF TV Transmitter", "versions": [{"status": "affected", "version": "BI"}, {"status": "affected", "version": "BIII"}], "defaultStatus": "unaffected"}, {"vendor": "Electrolink", "product": "UHF TV Transmitter", "versions": [{"status": "affected", "version": "10W", "versionType": "custom", "lessThanOrEqual": "5kW"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"}], "workarounds": [{"lang": "en", "value": "Electrolink has not responded to requests to work with CISA to mitigate \nthese vulnerabilities. Users of the affected products are encouraged to \ncontact Electrolink https://electrolink.com/contacts/ for additional information.", "supportingMedia": [{"type": "text/html", "value": "Electrolink has not responded to requests to work with CISA to mitigate \nthese vulnerabilities. Users of the affected products are encouraged to \ncontact <a target=\"_blank\" rel=\"nofollow\" href=\"https://electrolink.com/contacts/\">Electrolink</a> for additional information.\n\n<br>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change.", "supportingMedia": [{"type": "text/html", "value": "The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-302", "description": "CWE-302"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2024-05-28T16:45:02.057Z"}}}, "cveMetadata": {"cveId": "CVE-2024-22179", "state": "PUBLISHED", "dateUpdated": "2024-08-01T22:35:34.937Z", "dateReserved": "2024-01-05T22:07:42.998Z", "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "datePublished": "2024-04-18T22:06:26.781Z", "assignerShortName": "icscert"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "The application is vulnerable to an unauthenticated parameter \nmanipulation that allows an attacker to set the credentials to blank \ngiving her access to the admin panel. Also vulnerable to account \ntakeover and arbitrary password change."}, {"lang": "es", "value": "La aplicaci\u00f3n es vulnerable a una manipulaci\u00f3n de par\u00e1metros no autenticados que permite a un atacante dejar las credenciales en blanco, d\u00e1ndole acceso al panel de administraci\u00f3n. Tambi\u00e9n vulnerable a la apropiaci\u00f3n de cuentas y al cambio arbitrario de contrase\u00f1a."}], "id": "CVE-2024-22179", "lastModified": "2024-11-21T08:55:44.090", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "automatable": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirements": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "recovery": "NOT_DEFINED", "safety": "NOT_DEFINED", "subsequentSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "subsequentSystemIntegrity": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnerabilityResponseEffort": "NOT_DEFINED", "vulnerableSystemAvailability": "NONE", "vulnerableSystemConfidentiality": "NONE", "vulnerableSystemIntegrity": "HIGH"}, "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}, "published": "2024-04-18T22:15:09.850", "references": [{"source": "ics-cert@hq.dhs.gov", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-302"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}