Vulnerability · Published May 7, 2024 · Assigned by INCIBE
CVE-2024-4601Improper Authentication vulnerability in Socomec Net Vision
Medium 6.7
In plain English
A medium-severity improper authentication in Net vision from Socomec. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.2%top 94.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An incorrect authentication vulnerability has been found in Socomec Net Vision affecting version 7.20. This vulnerability allows an attacker to perform a brute force attack on the application and recover a valid session, because the application uses a five-digit integer value.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Socomec | Net vision | 7.20 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N