CVE-2024-39771 — Safie Inc. / QBiC CLOUD CC-2L

CVE-2024-39771

Safie Inc. / QBiC CLOUD CC-2L PUBLISHED

Description (CNA)

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack.

Affected (CNA)

Vendor / product	Versions
Safie Inc. / QBiC CLOUD CC-2L	affected v1.1.30 and earlier
Safie Inc. / Safie One	affected v1.8.2 and earlier

CWE

No CWE identifiers supplied.

References

https://safie.jp/information/post_6933/
https://jvn.jp/en/jp/JVN83440451/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.