Vulnerability · Published Apr 12, 2024 · Assigned by icscert
CVE-2024-28878IOSIX IO-1020 Micro ELD Download of Code Without Integrity Check
Critical 9.6
In plain English
A critical-severity security flaw in IO-1020 Micro ELD from IOSiX. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)9.6Critical
Exploit odds (30 days)0.3%top 80.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IOSiX | IO-1020 Micro ELD | 0 – through 360 |
Weakness: CWE-494 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H