CVE-2024-0242CWE-200

Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub

High · published February 8, 2024

CVSS v3.1
7.3
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00585 · 47.2th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-02-08T19:34Z
EPSS history
Timeline
  • 08 FEB 19:34Z
    Unauthorized access to settings in Qolsys IQ Panel 4 and IQ4 Hub
    cvelistv5