CVE-2024-7007
Authentication Bypass Using an Alternate Path or Channel in Positron Broadcast Signal Processor TRA7005
- State
- Published
- Severity
- 8.7 High
- Published
- Jul 25, 2024
- Updated
- Aug 1, 2024
- Reserved
- Jul 23, 2024
Description
Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | icscert |
Weaknesses
- CWE-288 Authentication Bypass Using an Alternate Path or Channel
Affected Products
| Product | Versions |
|---|---|
Broadcast Signal Processor TRA7005Positron S.R.L |
|
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.