CVE-2024-22395CWE-287

Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a…

Medium · published February 23, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated attacker to associate another user's MFA mobile application.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00433 · 36.5th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-02-23T23:37Z
EPSS history
Timeline
  • 23 FEB 23:37Z
    Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a…
    cvelistv5