Skip to content
OpenAdvisories
Critical · 10.0 CVE-2024-8887 EUVD-2024-49457GHSA-824r-f6r2-rhhx

Authentication bypass vulnerability on CIRCUTOR Q-SMT

Published Sep 18, 2024 · Updated Sep 18, 2024 · Assigned by INCIBE

Description

CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service (DoS) attack if an attacker with access to the web service bypasses the authentication mechanisms on the login page, allowing the attacker to use all the functionalities implemented at web level that allow interacting with the device.

Affected products

VendorProductAffectedFixed
CIRCUTOR CIRCUTOR Q-SMT 1.0.4 —

References