CVE-2024-51720

CVSS 3.1 Score 4.8 of 10 (medium)

Details

Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 307

Summary

CVE-2024-51720 is a new vulnerability affecting the SecuSUITE Secure Client Authentication (SCA) Server in versions 5.0.420 and older. This issue stems from insufficient entropy, making it possible for attackers to enroll unauthorized devices to a victim's account and telephone number. This could potentially lead to unauthorized access and privacy breaches. The vulnerability poses a serious risk, emphasizing the importance of updating to the latest SecuSUITE version to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share