Detections
Analytics

CVE-2024-8878

critical

Description

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49451

https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html

http://seclists.org/fulldisclosure/2024/Sep/50

Details

Source: Mitre, NVD

Published: 2024-09-25

Updated: 2025-11-04

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

CVSS v4

Base Score: 10

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Severity: Critical

EPSS

EPSS: 0.01265