Vulnerability Details CVE-2024-8890
An attacker with access to the network where the CIRCUTOR Q-SMT is located in its firmware version 1.0.4, could obtain legitimate credentials or steal sessions due to the fact that the device only implements the HTTP protocol. This fact prevents a secure communication channel from being established.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.1%
CVSS Severity
CVSS v3 Score 8.0
References
Products affected by CVE-2024-8890
-
cpe:2.3:h:circutor:q-smt:-
-
cpe:2.3:o:circutor:q-smt_firmware:1.0.4