CVE-2024-41925
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 3, 2024
Updated: Oct 4, 2024
CWE ID 98
Summary
CVE-2024-41925 is a newly identified vulnerability affecting the web service of ONS-S8 - Spectra Aggregation Switch. This issue stems from insufficient input validation, which enables attackers to traverse directories and bypass authentication. Consequently, they can execute remote code, posing a significant risk to the affected system's security. This vulnerability can lead to unauthorized access, data theft, or even system takeover. Users are advised to apply the necessary patches or updates as soon as they become available.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.