Back to overview

CVE-2024-6684

CRITICAL
9.9
CVSS 4.0
Description
Authentication Bypass Using an Alternate Path or Channel vulnerability in GST Electronics inohom Nova Panel N7 allows Authentication Bypass. This issue affects inohom Nova Panel N7: through 1.9.9.6. NOTE: The vendor was contacted and it was learned that the product is not supported.

Metadata

CVE ID
CVE-2024-6684
State
PUBLISHED
Assigner
TR-CERT
Reserved
2024-07-11 12:32 UTC
Published
2024-08-12 12:49 UTC
Last updated
2026-06-03 12:25 UTC
Primary CWE
CWE-288
CWE-288 Authentication Bypass Using an Alternate Path or Cha…
Vendor / Product
GST Electronics / inohom Nova Panel N7
Sources
cve.org  ·  NVD

Severity & Metrics

9.9 CRITICAL CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:H/S:P/AU:Y/R:U/U:Red
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
total
Affected products (1)
VendorProductPlatformVersions
GST Electronics inohom Nova Panel N7 — 0 ≤ 1.9.9.6
Weakness (CWE)
CWESourceDescription
CWE-288 cna CWE-288 Authentication Bypass Using an Alternate Path or Channel
CVSS scores (1)
ScoreSeverityVersionSourceVector
9.9 CRITICAL 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:H/S:P/AU:Y/R:U/U:Red
References (2)
Back to overview