Vulnerability · Published Apr 30, 2024 · Assigned by GovTech CSG

CVE-2024-4225NGDIN_ST v2.0D.0062 - Multiple Vulnerabilities

High 7.6

In plain English

A high-severity improper access control in NetGuardian DIN Remote Telemetry Unit (RTU) from DPS Telecom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 3.1)7.6High

Exploit odds (30 days)0.3%top 83.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).

Affected products (as reported)

Vendor	Product	Versions
DPS Telecom	NetGuardian DIN Remote Telemetry Unit (RTU)	NGDIN_ST App v2.0D.0062

Weakness: CWE-284 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

References

https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html