CVE-2024-23637

CVSS 3.1 Score 4.2 of 10 (medium)

Details

Published Jan 31, 2024
Updated: Feb 8, 2024
CWE ID 287
CWE ID 620

Summary

CVE-2024-23637 is a vulnerability found in OctoPrint, a web interface for 3D printers. This vulnerability affects versions up until and including 1.9.3 of OctoPrint. It allows malicious administrators to change the password of other admin accounts, including their own, without having to repeat their password. This can lead to potential dangers for organizations as an attacker who hijacks an admin account could lock out actual administrators from their OctoPrint instances. The vulnerability will be patched in version 1.10.0 of OctoPrint.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-23637 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options