How severe is CVE-2024-0942?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.3 out of 10.

What type of vulnerability is CVE-2024-0942?

This is classified as CWE-613, which is a common weakness in software security.

CVE-2024-0942 - MEDIUM Severity | CVSS 4.3

Vulnerability Description

A vulnerability was found in Totolink N200RE V5 9.3.5u.6255_B20211224. It has been classified as problematic. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi. The manipulation leads to session expiration. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-252186 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Related Vulnerabilities

CVE-2020-13305

MEDIUM

CVSS:4.3(Medium)

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not invalidating project invitation link upon removing a user from a project.

CWE-6132020

CVE-2020-1724

MEDIUM

CVSS:4.3(Medium)

A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a previously logged out user in the account man...

CWE-6132020

CVE-2020-1776

MEDIUM

CVSS:4.3(Medium)

When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affect...

CWE-6132020

CVE-2020-4780

MEDIUM

CVSS:4.3(Medium)

OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookie...

CWE-6132020

CVE-2021-20431

MEDIUM

CVSS:4.3(Medium)

IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive information from the system. IBM X-Force ID: 196...

CWE-6132021

CVE-2021-20581

MEDIUM

CVSS:4.3(Medium)

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 199324.

CWE-6132021