What is the CVSS score of CVE-2024-11856?

CVE-2024-11856 has a CVSS 3.1 base score of 3.7 (Low). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.3%.

HPE IceWall CVE-2024-11856

LOW

Insufficiently Protected Credentials (CWE-522)

2024-12-02 security-alert@hpe.com

Authentication Bypass

3.7

CVSS 3.1 · Vendor: hpe

Severity by source

Vendor (hpe) PRIMARY

3.7 LOW

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from Vendor (hpe) · only source for this CVE.

CVSS VectorVendor: hpe

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Dec 02, 2024 - 03:15 cve.org

LOW 3.7

DescriptionCVE.org

A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification.

AnalysisAI

A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Insufficiently Protected Credentials (CWE-522), which allows attackers to obtain user credentials due to weak protection mechanisms. A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification.

Affected ProductsAI

HPE IceWall products.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Hash passwords with strong algorithms (bcrypt, argon2), encrypt credentials in transit and at rest, never log credentials.