by Kastro
Paper/Archive/CVE-2024-8878

CVE-2024-8878

Riello Netman 204 — Unauthenticated Password Reset

EPSS 1%public exploitCVSS 10.0
critical.is priorityof 100
54
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 69.7.697 × 2013.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.

Affected

ProductAffectedFixed inSource
Netman 204≤ 4.05–CNA
netman_204_firmware≤ 4.05–CISA-ADP

Scores by source

CyberDanube (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitcyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.htmlrefseclists.org/fulldisclosure/2024/Sep/50