CVE-2024-0387CWE-1188
EDS-4000/G4000 Series IP Forwarding Vulnerability
Medium · published February 26, 2024
What it is
The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00538 · 44.5th percentile
- Weakness
- CWE-1188 · Initialization of a Resource with an Insecure Default
- Published
- 2024-02-26T13:26Z
EPSS history
Timeline