deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-9328
Published: 2024-09-29
Description: A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/edit_client.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/2024/Advocate%20office%20management%20system%20-%20edit_client.php%20sql%20injection%20vulnerability.md; https://vuldb.com/?ctiid.278837; https://vuldb.com/?id.278837
CVE: CVE-2024-3635
Published: 2024-09-30
Description: The Post Grid  WordPress plugin before 7.5.0 does not sanitise and escape some of its Grid settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/63cbe5f4-fe0f-499f-a964-cf4fbedcfa25/
CVE: CVE-2024-8239
Published: 2024-09-30
Description: The Starbox  WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like the malicious user's profile or pages where the starbox shortcode is used, which may be abused by users with at least the contributor role to conduct Stored XSS attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/02796da0-218d-4cbb-98ca-49eeea83cac5/
CVE: CVE-2024-8283
Published: 2024-09-30
Description: The Slider by 10Web  WordPress plugin before 1.2.59 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a60aed55-c0a2-4912-8844-cdddf31d90b6/
CVE: CVE-2024-8379
Published: 2024-09-30
Description: The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/a3463d5a-8215-4958-a6c0-039681c35a50/
CVE: CVE-2024-8536
Published: 2024-09-30
Description: The Ultimate Blocks  WordPress plugin before 3.2.2 does not validate and escape some of its block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/abd5b6c6-f541-4739-882d-2011436f7a8b/
CVE: CVE-2024-8448
Published: 2024-09-30
Description: Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://www.twcert.org.tw/en/cp-139-8046-057c2-2.html; https://www.twcert.org.tw/tw/cp-132-8045-a2804-1.html
CVE: CVE-2024-8449
Published: 2024-09-30
Description: Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://www.twcert.org.tw/en/cp-139-8048-f0e4d-2.html; https://www.twcert.org.tw/tw/cp-132-8047-adf79-1.html
CVE: CVE-2024-8450
Published: 2024-09-30
Description: Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.
CVSS Score: 8.6 (HIGH)
CWE: CWE-798
References: https://www.twcert.org.tw/en/cp-139-8050-52f32-2.html; https://www.twcert.org.tw/tw/cp-132-8049-83fe4-1.html
CVE: CVE-2024-8451
Published: 2024-09-30
Description: Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing unauthorized remote attackers to exploit this weakness to occupy connection slots and prevent legitimate users from accessing the SSH service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-280, CWE-400
References: https://www.twcert.org.tw/en/cp-139-8052-ac0ea-2.html; https://www.twcert.org.tw/tw/cp-132-8051-5048e-1.html
CVE: CVE-2024-8452
Published: 2024-09-30
Description: Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-328
References: https://www.twcert.org.tw/en/cp-139-8054-231ad-2.html; https://www.twcert.org.tw/tw/cp-132-8053-274bd-1.html
CVE: CVE-2024-41999
Published: 2024-09-30
Description: Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's settings, or spoof devices in other rooms.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-489
References: https://jvn.jp/en/jp/JVN42445661/; https://tsc-soft.co.jp/smart-tab/
CVE: CVE-2024-42496
Published: 2024-09-30
Description: Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vulnerability is exploited, an attacker with physical access to the device may retrieve the credential information and spoof the device to access the related external service.
CVSS Score: 2.4 (LOW)
CWE: CWE-256
References: https://jvn.jp/en/jp/JVN42445661/; https://tsc-soft.co.jp/smart-tab/
CVE: CVE-2024-45200
Published: 2024-09-30
Description: In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based buffer overflow upon deserialization of session information via a malformed browse-reply packet, aka KartLANPwn. The victim is not required to join a game session with an attacker. The victim must open the "Wireless Play" (or "LAN Play") menu from the game's title screen, and an attacker nearby (LDN) or on the same LAN network as the victim can send a crafted reply packet to the victim's console. This enables a remote attacker to obtain complete denial-of-service on the game's process, or potentially, remote code execution on the victim's console. The issue is caused by incorrect use of the Nintendo Pia library,
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94
References: https://github.com/latte-soft/kartlanpwn; https://hackerone.com/reports/2611669
CVE: CVE-2024-6394
Published: 2024-09-30
Description: A Local File Inclusion vulnerability exists in parisneo/lollms-webui versions below v9.8. The vulnerability is due to unverified path concatenation in the `serve_js` function in `app.py`, which allows attackers to perform path traversal attacks. This can lead to unauthorized access to arbitrary files on the server, potentially exposing sensitive information such as private SSH keys, configuration files, and source code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-29
References: https://huntr.com/bounties/6df4f990-b632-4791-b3ea-f40c9ea905bf
CVE: CVE-2024-8453
Published: 2024-09-30
Description: Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salted. Remote attackers with administrator privileges can read configuration files to obtain the hash values, and potentially crack them to retrieve the plaintext passwords.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-328, CWE-759
References: https://www.twcert.org.tw/en/cp-139-8056-09688-2.html; https://www.twcert.org.tw/tw/cp-132-8055-2c361-1.html
CVE: CVE-2024-8454
Published: 2024-09-30
Description: The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote attackers to send crafted packets that can crash the service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-476
References: https://www.twcert.org.tw/en/cp-139-8058-cc391-2.html; https://www.twcert.org.tw/tw/cp-132-8057-1b3fa-1.html
CVE: CVE-2024-8455
Published: 2024-09-30
Description: The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this service are encoded user passwords. Due to insufficient strength, unauthorized remote attackers who intercept the packets can directly crack them to obtain plaintext passwords.
CVSS Score: 8.1 (HIGH)
CWE: CWE-261, CWE-326
References: https://www.twcert.org.tw/en/cp-139-8060-f3955-2.html; https://www.twcert.org.tw/tw/cp-132-8059-bde5f-1.html
CVE: CVE-2024-8456
Published: 2024-09-30
Description: Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.twcert.org.tw/en/cp-139-8062-92f17-2.html; https://www.twcert.org.tw/tw/cp-132-8061-91872-1.html
CVE: CVE-2024-8457
Published: 2024-09-30
Description: Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote authenticated users with administrator privileges to inject arbitrary JavaScript, leading to Stored XSS attack.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.twcert.org.tw/en/cp-139-8064-70255-2.html; https://www.twcert.org.tw/tw/cp-132-8063-01634-1.html
CVE: CVE-2024-8458
Published: 2024-09-30
Description: Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user into visiting a malicious website, allowing the attacker to impersonate the user and perform actions on their behalf, such as creating accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.twcert.org.tw/en/cp-139-8066-d6504-2.html; https://www.twcert.org.tw/tw/cp-132-8065-579c1-1.html
CVE: CVE-2024-8459
Published: 2024-09-30
Description: Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attackers with administrator privileges to read the file and obtain the credentials.
CVSS Score: 7.2 (HIGH)
CWE: CWE-312
References: https://www.twcert.org.tw/en/cp-139-8068-8aaa5-2.html; https://www.twcert.org.tw/tw/cp-132-8067-2fc50-1.html
CVE: CVE-2024-9329
Published: 2024-09-30
Description: In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-233, CWE-601
References: https://github.com/eclipse-ee4j/glassfish/pull/25106; https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/232; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2024-45772
Published: 2024-09-30
Description: Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator.

This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0.
The deprecated org.apache.lucene.replicator.http package is affected.
The org.apache.lucene.replicator.nrt package is not affected.

Users are recommended to upgrade to version 9.12.0, which fixes the issue.

 The deserialization can only be triggered if users actively deploy an network-accessible implementation and a corresponding client using a HTTP library that uses the API (e.g., a custom servlet and HTTPClient). Java serialization filters (such as -Djdk.serialFilter='!*' on the commandline) can mitigate the issue on vulnerable versions without impacting functionality.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://lists.apache.org/thread/3f3oph7bqnqspb9q5p0gm5mgc1b6thjo; http://www.openwall.com/lists/oss-security/2024/09/29/1
CVE: CVE-2024-45920
Published: 2024-09-30
Description: A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/ipxsec/10526db2cbfcb899a70dcb8f0ee53a99
CVE: CVE-2024-47641
Published: 2024-09-30
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muhammad Shakeel Confetti Fall Animation confetti-fall-animation allows Stored XSS.This issue affects Confetti Fall Animation: from n/a through <= 1.3.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/confetti-fall-animation/vulnerability/wordpress-confetti-fall-animation-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-6051
Published: 2024-09-30
Description: Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13.
CWE: CWE-926
References: https://cert.pl/en/posts/2024/09/CVE-2024-6051/; https://cert.pl/posts/2024/09/CVE-2024-6051/
CVE: CVE-2024-45792
Published: 2024-09-30
Description: Mantis Bug Tracker (MantisBT) is an open source issue tracker. Using a crafted POST request, an unprivileged, registered user is able to retrieve information about other users' personal system profiles. This vulnerability is fixed in 2.26.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/mantisbt/mantisbt/commit/ef0f[PII_REDACTED]50cc20a39ff9cb2010d5463b41; https://github.com/mantisbt/mantisbt/security/advisories/GHSA-h5q3-fjp4-2x7r; https://mantisbt.org/bugs/view.php?id=34640
CVE: CVE-2024-46280
Published: 2024-09-30
Description: PIX-LINK LV-WR22 RE3002-P1-01_V117.0 is vulnerable to Improper Access Control. The TELNET service is enabled with weak credentials for a root-level account, without the possibility of changing them.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://0xmupa.github.io/pixlink-weak-telnet
CVE: CVE-2024-46293
Published: 2024-09-30
Description: Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level actions without possessing a valid session token. The application does not verify whether the user is logged in as an admin or even check for a session token at all.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/bunyamindemir/vulnerability-disclosures/blob/main/omos-authorization-bypass.md
CVE: CVE-2024-46313
Published: 2024-09-30
Description: TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm.
CVSS Score: 8.0 (HIGH)
CWE: CWE-121
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TP-LINK/WR-941ND/popupSiteSurveyRpm.md
CVE: CVE-2024-47063
Published: 2024-09-30
Description: Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If a malicious CVAT user with permissions to either create a task, or edit an existing task can trick another logged-in user into visiting a maliciously-constructed URL, they can initiate any API calls on that user's behalf. This gives the attacker temporary access to all data that the victim user has access to. Upgrade to CVAT 2.19.0 or a later version to fix this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/cvat-ai/cvat/commit/75c3d573bc9468b718f53b442c2ef69ad1d5de12; https://github.com/cvat-ai/cvat/security/advisories/GHSA-2c85-39cc-2px9
CVE: CVE-2024-47064
Published: 2024-09-30
Description: Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. If an attacker can trick a logged-in CVAT user into visiting a maliciously-constructed URL, they can initiate any API calls on that user's behalf. This gives the attacker temporary access to all data that the victim user has access to. Upgrade to CVAT 2.19.0 or a later version to fix this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-81
References: https://github.com/cvat-ai/cvat/commit/0bf45fd5de08a652dffbfb517318a64c2fdbc5cf; https://github.com/cvat-ai/cvat/security/advisories/GHSA-hp6c-f34j-qjj7
CVE: CVE-2024-47172
Published: 2024-09-30
Description: Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account may retrieve certain information about any project, task, job or membership resource on the CVAT instance. The information exposed in this way is the same as the information returned on a GET request to the resource. In addition, the attacker can also alter the default source and target storage associated with any project or task. Upgrade to CVAT 2.19.1 or any later version to fix the issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://github.com/cvat-ai/cvat/commit/59ce6ca784a0d426b2cfb8cf2850ba1d520c03f5; https://github.com/cvat-ai/cvat/security/advisories/GHSA-gxhm-hg65-5gh2
CVE: CVE-2024-46475
Published: 2024-09-30
Description: A reflected cross-site scripting (XSS) vulnerability on the homepage of Metronic Admin Dashboard Template v2.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://blog.csdn.net/qq_45744104/article/details/141903463
CVE: CVE-2024-46510
Published: 2024-09-30
Description: ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://flowus.cn/share/c7784cff-2840-4761-8d1b-621016b6b1b9?code=G8A6P3
CVE: CVE-2024-46869
Published: 2024-09-30
Description: In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel_pcie: Allocate memory for driver private data

Fix driver not allocating memory for struct btintel_data which is used
to store internal data.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/2b4545f08cc68d2fc835f5c490b36e[PII_REDACTED]; https://git.kernel.org/stable/c/7ffaa[PII_REDACTED]80af12e57649ad57c70bf0f43; https://git.kernel.org/stable/c/fa9e1c1b1f389a8e6d987ac6cb3e2ba04f8ec875
CVE: CVE-2024-47067
Published: 2024-09-30
Description: AList is a file list program that supports multiple storages. AList contains a reflected cross-site scripting vulnerability in helper.go. The endpoint /i/:link_name takes in a user-provided value and reflects it back in the response. The endpoint returns an application/xml response, opening it up to HTML tags via XHTML and thus leading to a XSS vulnerability. This vulnerability is fixed in 3.29.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/alist-org/alist/commit/[PII_REDACTED]594868e931f3de1188ddd8bde93b78; https://securitylab.github.com/advisories/GHSL-2023-220_Alist/
CVE: CVE-2024-47178
Published: 2024-09-30
Description: basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe equality comparison that can leak timing information. This issue has been fixed in basic-auth-connect 1.1.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-208
References: https://github.com/expressjs/basic-auth-connect/commit/bac1e6a8530e1efd0028800b9b588a37adb0d203; https://github.com/expressjs/basic-auth-connect/security/advisories/GHSA-7p89-p6hx-q4fw
CVE: CVE-2024-47530
Published: 2024-09-30
Description: Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lack of scheme validation, HTTPS Downgrade Attack can be performed on the users. This vulnerability is fixed in 4.89.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://github.com/Clinical-Genomics/scout/commit/50055edfca9a7183b248019af97e1fb0b0065a02; https://github.com/Clinical-Genomics/scout/security/advisories/GHSA-3x45-2m34-x95v
CVE: CVE-2024-47531
Published: 2024-09-30
Description: Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass intended file extension and make users download malicious files with any extension. With malicious content injected inside the file data and users unknowingly downloading it and opening may lead to the compromise of users' devices or data. This vulnerability is fixed in 4.89.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-116
References: https://github.com/Clinical-Genomics/scout/commit/f59e50f8ea596e641da8a0e9c7a33c0696bcbea5; https://github.com/Clinical-Genomics/scout/security/advisories/GHSA-24xv-q29v-3h6r
CVE: CVE-2024-47532
Published: 2024-09-30
Description: RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application does not require access to the module string, it can remove it from RestrictedPython.Utilities.utility_builtins or otherwise do not make it available in the restricted execution environment.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/zopefoundation/RestrictedPython/commit/d701cc36cccac36b21fa200f1f2d1945a9a215e6; https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-5rfv-66g4-jr8h
CVE: CVE-2024-45993
Published: 2024-09-30
Description: Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-122
References: http://giflib.com; https://gitlab.com/mthandazo/project-pov
CVE: CVE-2024-46540
Published: 2024-09-30
Description: A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266
References: https://gist.github.com/microvorld/1c1ef9c3390a5d88a5ede9f9424a8bd2; https://github.com/emlog/emlog; https://github.com/microvorld/CVE-2024/blob/main/emlog.md
CVE: CVE-2024-46548
Published: 2024-09-30
Description: TP-Link Tapo P125M and Kasa KP125M v1.0.3 was discovered to improperly validate certificates, allowing attackers to eavesdrop on communications and access sensitive information via a man-in-the-middle attack.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/Chapoly1305/tp-link-cve/blob/main/CVE-2024-46548.md
CVE: CVE-2024-46549
Published: 2024-09-30
Description: An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users.
CVSS Score: 7.6 (HIGH)
CWE: CWE-269
References: https://github.com/Chapoly1305/tp-link-cve/blob/main/CVE-2024-46549.md