CVE-2024-37566

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids

Critical · published February 27, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

🚨 A simple oversight leaves Infoblox NIOS versions up to 8.6.4 vulnerable to improper authentication! 🔥 Think of it like having a residential security system that doesn’t require a passcode — anyone could just walk in and change your settings without needing permission! This vulnerability allows attackers to manipulate grid settings without proper authentication, which could lead to unauthorized access, data manipulation, or even network outages. The potential fallout? It could disrupt services and expose sensitive information, making it absolutely devastating for affected organizations.

Put simply

Think of it like having a residential security system that doesn’t require a passcode — anyone could just walk in and change your settings without needing permission! The flaw lies in the authentication process for the grids within Infoblox NIOS, allowing unauthorized users to gain access and perform actions without valid credentials.

What to do

This vulnerability allows attackers to manipulate grid settings without proper authentication, which could lead to unauthorized access, data manipulation, or even network outages. The potential fallout? It could disrupt services and expose sensitive information, making it absolutely devastating for affected organizations. Immediate action is crucial: upgrade to the latest version of Infoblox NIOS (8.6.5 or higher) to secure your systems. Additionally, review user access privileges to ensure only authorized personnel have permissions for grid management. You’ve got this! By taking these steps now, you can lock down your system and protect your network. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Published
2025-02-27T00:00Z
EPSS history
Timeline
  • 27 FEB 00:00Z
    Infoblox NIOS through 8.6.4 has Improper Authentication for Grids
    cvelistv5