CVE-2024-37566

CVSS 3.1 Score 9.8 of 10 (high)

Attack Complexity low
Confidentiality high
Integrity high
Availability high
Scope unchanged
Privileges Required none

Details

Published Feb 27, 2025
Updated: Feb 28, 2025
CWE ID 284

Summary

CVE-2024-37566 is a newly identified vulnerability affecting Infoblox Network Intelligence Operating System (NIOS) versions up to 8.6.4. This issue involves a lack of proper authentication for Grids, which could potentially enable unauthorized users to gain access to sensitive information or make unauthorized changes. The exact impact and exploitation methods are still under investigation, but it is recommended that organizations using Infoblox NIOS apply the forthcoming patch to mitigate this risk. Failure to address this vulnerability may result in data breaches or disruptions to network services.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share