What is CVE-2024-8878?

CVE-2024-8878 is a critical-severity vulnerability in Riello Netman 204, classified under Weak Password Recovery Mechanism for Forgotten Password. CVSS score: 9.8/10. Published 2024-09-25.

How severe is CVE-2024-8878?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2024-8878 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Riello Netman 204

CVE-2024-8878

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.

EPSS: 0.013 (66.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-640 — Weak Password Recovery Mechanism for Forgotten Password

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

office@cyberdanube.com (exploit, Vendor Advisory, third-party-advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2024-8878?: CVE-2024-8878 is a critical-severity vulnerability in Riello Netman 204, classified under Weak Password Recovery Mechanism for Forgotten Password. CVSS score: 9.8/10. Published 2024-09-25.
How severe is CVE-2024-8878?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2024-8878 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.