CVE-2024-24486

A

n issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the SAVE EEP_DATA command.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:silextechnology:ds-600_firmware:1.4.1:*:*:*:*:*:*:*
cpe:2.3:h:silextechnology:ds-600:-:*:*:*:*:*:*:*

History

10 Apr 2025, 13:39

Type Values Removed Values Added
First Time Silextechnology ds-600 Firmware
Silextechnology
Silextechnology ds-600
References () https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 - () https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 - Third Party Advisory
CPE cpe:2.3:o:silextechnology:ds-600_firmware:1.4.1:*:*:*:*:*:*:*
cpe:2.3:h:silextechnology:ds-600:-:*:*:*:*:*:*:*

21 Nov 2024, 08:59

Type Values Removed Values Added
References () https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 - () https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 -

01 Aug 2024, 13:47

Type Values Removed Values Added
CWE CWE-94 CWE-284

08 Jul 2024, 14:17

Type Values Removed Values Added
CWE CWE-94
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.1

Information

Published : 2024-04-15 19:15

Updated : 2025-04-10 13:39


NVD link : CVE-2024-24486

Mitre link : CVE-2024-24486

CVE.ORG link : CVE-2024-24486


JSON object : View

CWE
CWE-284

Improper Access Control