Vulnerability · Published May 23, 2024 · Assigned by THA-PSIRT
CVE-2024-5264Network Key Transfer with AES KHT vulnerability in Luna EFT
Medium 5.9
In plain English
A medium-severity security flaw in Luna EFT from Thales. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.4%top 69.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis
Affected products (as reported)
Weakness: CWE-338 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N