CVE-2024-9928: Medium severity NSD NSD570 vulnerability
A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. If exploited, this could cause account takeover and unauthorized access to the system when an attacker conducts brute-force attacks against the equipment login. Note that the system supports only one concurrent session and implements a delay of more than a second between failed login attempts making it difficult to automate the attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9928?
CVE-2024-9928 has a high severity level due to its potential for account takeover through brute-force attacks.
How do I fix CVE-2024-9928?
To fix CVE-2024-9928, implement rate limiting on the authentication attempts for the NSD570 login panel.
What kind of attacks does CVE-2024-9928 expose the NSD570 to?
CVE-2024-9928 exposes the NSD570 to brute-force attacks that can lead to unauthorized access.
Which system does CVE-2024-9928 affect?
CVE-2024-9928 specifically affects the NSD570 equipment login panel.
Is an update available for CVE-2024-9928?
As of now, there is no specific update mentioned for CVE-2024-9928; checking with the vendor for patches is recommended.