CVE-2024-8878 — Unauthenticated Password Reset

CVE-2024-8878

Unauthenticated Password Reset PUBLISHED

Description (CNA)

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.

Affected (CNA)

Vendor / product	Versions
Riello / Netman 204	affected 0 through 4.05

CWE

CWE-640

References

https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2024/Sep/50