What is CVE-2024-5445?

CVE-2024-5445 is a low-severity vulnerability in N-able Ecosystem Agent, classified under Improper Certificate Validation. CVSS score: 3.8/10. Published 2024-08-12.

How severe is CVE-2024-5445?

Low severity. CVSS v3 base score is 3.8 out of 10.

Vulnerability in N-able Ecosystem Agent

CVE-2024-5445

Ecosystem Agent version 4 < 4.1.5.2597 and Ecosystem Agent version 5 < 5.1.4.2473 did not properly validate SSL/TLS certificates, which could allow a malicious actor to perform a Man-in-the-Middle and intercept traffic between the agent an…

Vulnerability class: Improper Certificate Validation

EPSS: 0.003 (21.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.8 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N.

Affected products

N-able Ecosystem Agent — versions < 4.1.5.2597, < 5.1.4.2473

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

a5532a13-c4dd-4202-bef1-e0b8f2f8d12b
a5532a13-c4dd-4202-bef1-e0b8f2f8d12b
a5532a13-c4dd-4202-bef1-e0b8f2f8d12b

Frequently asked questions

What is CVE-2024-5445?: CVE-2024-5445 is a low-severity vulnerability in N-able Ecosystem Agent, classified under Improper Certificate Validation. CVSS score: 3.8/10. Published 2024-08-12.
How severe is CVE-2024-5445?: Low severity. CVSS v3 base score is 3.8 out of 10.