CVE-2024-3270

Summary

CVE-2024-3270 is a newly disclosed vulnerability affecting ThingsBoard versions up to 3.6.2. This issue lies within the AdvancedFeature component and results in improper access controls. An attacker can exploit this remotely, leading to potential unauthorized access. The vulnerability has been made public, increasing the risk of exploitation. VDB-259282 identifies this issue, and the vendor is reportedly working on a fix in version 3.7.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.