CVE-2024-49399

Missing Authentication for Critical Function in Elvaco M-Bus Metering Gateway CMe3100 PUBLISHED

Description (CNA)

The affected product is vulnerable to an attacker being able to use commands without providing a password which may allow an attacker to leak information.

Affected (CNA)

Vendor / product	Versions
Elvaco / M-Bus Metering Gateway CMe3100	affected 1.12.1

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.