What is CVE-2024-40117?

CVE-2024-40117 is a critical-severity vulnerability in N/a, classified under Improper Access Control. CVSS score: 9.8/10. Published 2024-07-26.

How severe is CVE-2024-40117?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in N/a

CVE-2024-40117

Incorrect access control in Solar-Log 1000 before v2.8.2 and build 52- 23.04.2013 allows attackers to obtain Administrative privileges via connecting to the web administration server. Not existing for SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300, 1200, 2000, SL 50 Gateway / fixed in 5.1.2 / 6.0.0 for SL Base.

EPSS: 0.007 (50.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

cve@mitre.org
cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2024-40117?: CVE-2024-40117 is a critical-severity vulnerability in N/a, classified under Improper Access Control. CVSS score: 9.8/10. Published 2024-07-26.
How severe is CVE-2024-40117?: Critical severity. CVSS v3 base score is 9.8 out of 10.