CVE-2024-36391

CVSS 3.1 Score 9.1 of 10 (high)

Details

Published Jun 2, 2024
Updated: Jun 3, 2024
CWE ID 320

Summary

CVE-2024-32691 is a newly identified vulnerability affecting MileSight DeviceHub. The issue involves key management errors that could potentially enable an attacker to bypass authentication and conduct man-in-the-middle attacks. This security weakness could lead to unauthorized access to sensitive information and unintended modifications to data transmissions. Organizations utilizing MileSight DeviceHub are advised to apply the necessary patches as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share