CVE-2024-9692 — Improper Access Control in Input in VIMESA VHF/FM Transmitter Blue Plus

CVE-2024-9692

Improper Access Control in Input in VIMESA VHF/FM Transmitter Blue Plus PUBLISHED

Description (CNA)

VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service (DoS) vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations.

Affected (CNA)

Vendor / product	Versions
VIMESA / VHF/FM Transmitter Blue Plus	affected v9.7.1

CWE

CWE-284

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.