CVE-2024-33470: Medium severity AVTECH Room Alert 4E vulnerability
Published May 24, 2024
·Updated
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
1 affected component
AVTECH Room Alert 4E
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
May 24, 2024
CVE Published
via NVD·03:15 PM
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Oct 31, 2024
Data Sourced
via MITRE·06:17 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-33470?
CVE-2024-33470 is considered a critical vulnerability due to the exposure of plaintext credentials.
2
How do I fix CVE-2024-33470?
There is no fix available for CVE-2024-33470 as it affects unsupported versions of AVTECH Room Alert 4E.
3
What products are affected by CVE-2024-33470?
CVE-2024-33470 specifically impacts the AVTECH Room Alert 4E v4.4.0.
4
What type of attack does CVE-2024-33470 allow?
CVE-2024-33470 enables attackers to gain access to credentials through a passback attack.
5
Is there a workaround for CVE-2024-33470?
Currently, there are no known workarounds for CVE-2024-33470 due to the lack of support for the affected product.