CVE-2024-36391: MileSight DeviceHub - CWE-320: Key Management Errors
Published Jun 2, 2024
·Updated
MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic
Affected Software
3 affected components
Milesight DeviceHub
All of the following
Milesight DeviceHub=3.0.1-r1
Ubuntu=20.04
Event History
Jun 2, 2024
CVE Published
via MITRE·01:23 PM
Data Sourced
via MITRE·01:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-36391?
CVE-2024-36391 is classified as a critical vulnerability due to its potential to allow authentication bypass and man-in-the-middle attacks.
2
How do I fix CVE-2024-36391?
To fix CVE-2024-36391, ensure that proper key management practices are implemented and update the MileSight DeviceHub to the latest version.
3
What systems are affected by CVE-2024-36391?
CVE-2024-36391 affects MileSight DeviceHub software where key management errors are present.
4
What types of attacks can CVE-2024-36391 facilitate?
CVE-2024-36391 can facilitate authentication bypass and man-in-the-middle traffic interception.
5
Is there a workaround for CVE-2024-36391?
A possible workaround for CVE-2024-36391 is to temporarily disable remote access features until an update is applied.