Cyber Resilience

CVE-2024-8887

Critical

Published: 18 September 2024

Published
18 September 2024
Modified
01 October 2024
KEV Added
—
Patch
—
CVSS Score v3.1 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0007 22.5th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-8887 is a critical-severity Improper Validation of Specified Quantity in Input (CWE-1284) vulnerability in Circutor Q-Smt Firmware. Its CVSS base score is 10.0 (Critical).

Operationally, ranked at the 22.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

CIRCUTOR Q-SMT in its firmware version 1.0.4, could be affected by a denial of service (DoS) attack if an attacker with access to the web service bypasses the authentication mechanisms on the login page, allowing the attacker to use all…

more

the functionalities implemented at web level that allow interacting with the device.

CWE(s)
CWE-1284

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

circutor
q-smt firmware
1.0.4

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References