CVE-2024-4225

NGDIN_ST v2.0D.0062 - Multiple Vulnerabilities

State: Published
Severity: 7.6 High
Published: Apr 30, 2024
Updated: Aug 9, 2024
Reserved: Apr 26, 2024

Description

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).

Scores

CVSS	Score	Vector	Source
3.1	7.6 High	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L	GovTech CSG

Weaknesses

CWE-284 Improper Access Control, CWE-522 Insufficiently Protected Credentials, CWE-79 Improper Neutralization of Input During Web Page Generation

Affected Products

Product	Versions
NetGuardian DIN Remote Telemetry Unit (RTU)DPS Telecom	NGDIN_ST App v2.0D.0062Affected

References

https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.