CVE-2024-2377
- State
- Published
- Severity
- 7.6 High
- Published
- Apr 30, 2024
- Updated
- Aug 1, 2024
- Reserved
- Mar 11, 2024
Description
A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.6 High | CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H | Hitachi Energy |
Weaknesses
- CWE-346 Origin Validation Error
Affected Products
| Product | Versions |
|---|---|
SDM600Hitachi Energy |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.