CVE-2024-6466: Medium severity nec websam deployment manager vulnerability
Published Jan 21, 2025
·Updated
NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified.
Affected Software
1 affected component
NEC WebSAM DeploymentManager>=6.0<=6.80
Event History
Jan 21, 2025
CVE Published
via MITRE·10:03 AM
Data Sourced
via MITRE·10:03 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-6466?
CVE-2024-6466 has a high severity rating due to the potential for unauthorized configuration changes and product restarts.
2
How do I fix CVE-2024-6466?
To fix CVE-2024-6466, ensure that the X-FRAME-OPTIONS header is properly specified in the configuration settings.
3
What versions are affected by CVE-2024-6466?
CVE-2024-6466 affects NEC WebSAM DeploymentManager versions from 6.0 to 6.80.
4
What can attackers do with CVE-2024-6466?
Attackers can reset configurations or restart products remotely due to the lack of an X-FRAME-OPTIONS header.
5
Is there a workaround for CVE-2024-6466?
Currently, the recommended workaround for CVE-2024-6466 is to implement the X-FRAME-OPTIONS header to mitigate the vulnerability.