Vulnerability Details CVE-2024-8891
An attacker with no knowledge of the current users in the web application, could build a dictionary of potential users and check the server responses as it indicates whether or not the user is present in CIRCUTOR Q-SMT in its firmware version 1.0.4.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.4%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2024-8891
-
cpe:2.3:h:circutor:q-smt:-
-
cpe:2.3:o:circutor:q-smt_firmware:1.0.4