CVE-2024-37038CWE-276

CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform…

High · published June 12, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated

user with access to the device’s web interface to perform unauthorized file and firmware

uploads when crafting custom web requests.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2024-06-12T16:51Z
EPSS history
Timeline
  • 12 JUN 16:51Z
    CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform…
    cvelistv5