Vulnerability · Published Aug 12, 2024 · Assigned by TR-CERT
CVE-2024-6684Authentication Bypass in GST Electronics' inohom Nova Panel N7
Critical 9.9
In plain English
A critical-severity authentication bypass in inohom Nova Panel N7 from GST Electronics. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 4.0)9.9Critical
Exploit odds (30 days)0.6%top 51.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom Nova Panel N7 allows Authentication Bypass. This issue affects inohom Nova Panel N7: through 1.9.9.6. NOTE: The vendor was contacted and it was learned that the product is not supported.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| GST Electronics | inohom Nova Panel N7 | 0 – through 1.9.9.6 |
Weakness: CWE-288 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:H/S:P/AU:Y/R:U/U:Red
References
- https://www.usom.gov.tr/bildirim/tr-24-1194 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1194 government-resource