Skip to main content

Iap 420 Firmware CVE-2024-55548

MEDIUM
Improper Check or Handling of Exceptional Conditions (CWE-703)
2024-12-10 office@cyberdanube.com
Information Disclosure Iap 420 Firmware
6.9
CVSS 4.0 · Vendor: cyberdanube
Share

Severity by source

Vendor (cyberdanube) PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (cyberdanube) · only source for this CVE.

CVSS VectorVendor: cyberdanube

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

1
CVE Published
Dec 10, 2024 - 17:15 cve.org
MEDIUM 6.9

DescriptionCVE.org

Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e.

AnalysisAI

Improper check of password character lenght in ORing IAP-420 allows a forced deadlock.01e. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-703. Improper check of password character lenght in ORing IAP-420 allows a forced deadlock.01e. Affected products include: Oringnet Iap-420 Firmware. Version information: through 2.01.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Iap 420 Firmware

View all
CVE-2022-3203 CRITICAL POC
9.8 Oct 21

On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. R
CVE-2024-55544 HIGH POC
8.7 Dec 10

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.01e and

CVE-2024-5411 HIGH POC
8.7 May 28

Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated
CVE-2024-5410 HIGH POC
8.3 May 28

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).01e and below. Rate
CVE-2024-55546 HIGH POC
7.1 Dec 10

Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).01e and below. Rate
CVE-2024-55545 HIGH POC
7.1 Dec 10

Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting (XSS).01e and below. Rated high

CVE-2024-55547 CRITICAL
9.3 Dec 10

SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection.01e. Rated critical severity (CVSS 9.3), this vu

Same weakness CWE-703 – Improper Check or Handling of Exceptional Conditions

View all
CVE-2019-5031 HIGH POC
8.8
CVE-2019-11245 HIGH POC
7.8
CVE-2025-59531 HIGH POC
7.5
CVE-2025-68135 MEDIUM POC
6.5
CVE-2023-0397 MEDIUM POC
6.5
CVE-2023-51443 MEDIUM POC
5.9
CVE-2023-49786 MEDIUM POC
5.9
CVE-2025-13026 CRITICAL
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-55548 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy