What is the CVSS score of CVE-2024-5557?

CVE-2024-5557 has a CVSS 3.1 base score of 4.5 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2024-5557?

Yes, a patch is available for CVE-2024-5557. Update the affected software to the latest version immediately.

Spacelogic As B Firmware CVE-2024-5557

MEDIUM

Insertion of Sensitive Information into Log File (CWE-532)

2024-06-12 cybersecurity@se.com

Information Disclosure Spacelogic As B Firmware Spacelogic As P Firmware

4.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.5 MEDIUM

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jun 12, 2024 - 17:15 nvd

MEDIUM 4.5

DescriptionNVD

CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could cause exposure of SNMP credentials when an attacker has access to the controller logs.

AnalysisAI

exposure of SNMP credentials when an attacker has access to the controller logs. Rated medium severity (CVSS 4.5), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-532. exposure of SNMP credentials when an attacker has access to the controller logs. Affected products include: Schneider-Electric Spacelogic As-B Firmware, Schneider-Electric Spacelogic As-P Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.