Vulnerability · Published Nov 12, 2024 · Assigned by VulDB

CVE-2024-11126Digistar AG-30 Plus Login Page excessive authentication

Low 3.1

In plain English

A low-severity security flaw in AG-30 Plus from Digistar. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 3.1)3.1Low

Exploit odds (30 days)0.3%top 78.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic. Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of excessive authentication attempts. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Digistar	AG-30 Plus	2.6b

Weakness: CWE-307, CWE-799 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References

VDB-283974 | Digistar AG-30 Plus Login Page excessive authentication vdb-entry
VDB-283974 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
Submit #437096 | Digistar AG-30 Plus 2.6b Improper Restriction of Excessive Authentication Attempts third-party-advisory