CVE-2024-45317
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 11, 2024
Updated: Mar 22, 2025
CWE ID 918
Summary
CVE-2024-45317 is a Server-Side Request Forgery (SSRF) vulnerability affecting SMA1000 appliance firmware versions 12.4.3-02676 and earlier. This issue permits unauthenticated attackers to manipulate the SMA1000 server-side application into making requests to IP addresses of their choosing. Successful exploitation could lead to potential information disclosure or gain unauthorized access to the affected system. It is essential for organizations using the SMA1000 appliance to update their firmware as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.