Vulnerability · Published Aug 22, 2024 · Assigned by icscert
CVE-2024-39776Avtec Outpost Storage of File with Sensitive Data Under Web Root
High 7.5
In plain English
A high-severity security flaw in Outpost 0810 from Avtec. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 66.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Avtec | Outpost 0810 | 0 – before v5.0.0 |
| Avtec | Outpost Uploader Utility | 0 – before v5.0.0 |
Weakness: CWE-219 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N