CVE-2024-22395

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published Feb 24, 2024
Updated: Feb 26, 2024
CWE ID 287

Summary

CVE-2024-22395 is a newly discovered vulnerability affecting the SMA100 SSL-VPN virtual office portal. This issue involves improper access control, allowing a remote, authenticated attacker to manipulate Multi-Factor Authentication (MFA) mobile application associations for other users under specific conditions. This vulnerability could potentially result in unauthorized access to protected systems and data. Organizations using the SMA100 SSL-VPN virtual office portal are advised to apply the necessary patches or updates as soon as possible to mitigate this risk. Failure to address this vulnerability could lead to serious security consequences.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share