CVE-2024-49396CWE-522

Insufficiently Protected Credentials in Elvaco M-Bus Metering Gateway CMe3100

High · published October 17, 2024

CVSS v4.0
8.7
EPSS
0%
Percentile
31.6
In the wild
Unconfirmed
What it is

The affected product is vulnerable due to insufficiently protected credentials, which may allow an attacker to impersonate Elvaco and send false information.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00387 · 31.6th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2024-10-17T16:12Z
EPSS history
Timeline
  • 17 OCT 16:12Z
    Insufficiently Protected Credentials in Elvaco M-Bus Metering Gateway CMe3100
    cvelistv5