How severe is CVE-2024-10776?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.2 out of 10.

What type of vulnerability is CVE-2024-10776?

This is classified as CWE-306, which is a common weakness in software security.

CVE-2024-10776 - HIGH Severity | CVSS 8.2

Vulnerability Description

Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager. This allows an attacker to remove legitimate apps creating a DoS attack, read and write files or load apps that use all features of the product available to a customer.

Related Vulnerabilities

CVE-2019-12105

HIGH

CVSS:8.2(High)

In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enabled by default bu...

CWE-3062019

CVE-2019-17353

HIGH

CVSS:8.2(High)

An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN,...

CWE-3062019

CVE-2019-6820

HIGH

CVSS:8.2(High)

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specif...

CWE-3062019

CVE-2021-27963

HIGH

CVSS:8.2(High)

SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or sess...

CWE-3062021

CVE-2022-34321

HIGH

CVSS:8.2(High)

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics abou...

CWE-3062022

CVE-2023-23444

HIGH

CVSS:8.2(High)

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 11...

CWE-3062023