CVE-2024-8887 — Authentication bypass vulnerability on CIRCUTOR Q-SMT

CVE-2024-8887

Authentication bypass vulnerability on CIRCUTOR Q-SMT PUBLISHED

Description (CNA)

CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service (DoS) attack if an attacker with access to the web service bypasses the authentication mechanisms on the login page, allowing the attacker to use all the functionalities implemented at web level that allow interacting with the device.

Affected (CNA)

Vendor / product	Versions
CIRCUTOR / CIRCUTOR Q-SMT	affected 1.0.4

CWE

CWE-1284

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.