CVE-2024-24215

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Feb 8, 2024
Updated: Feb 15, 2024

Summary

CVE-2024-24215 is a vulnerability found in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014. Attackers can exploit this vulnerability by sending a crafted POST request to leak configuration information. The base severity of this vulnerability is rated as MEDIUM, with a base score of 5.3 out of 10. It requires no privileges and does not require user interaction, making it easier for attackers to exploit remotely over the network. The impact on confidentiality is rated as LOW, indicating that sensitive information may be exposed. The vulnerability has a moderate exploitability score of 3.9 out of 10 and poses a potential danger to organizations using the affected web server version unless remediation measures are implemented promptly by applying patches or updates provided by the vendor.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-24215 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options