Critical severity9.8NVD Advisory· Published Oct 25, 2024· Updated Jun 17, 2026

CVE-2024-10381

Description

This vulnerability exists in Matrix Door Controller Cosec Vega FAXQ due to improper implementation of session management at the web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the vulnerable device.

Successful exploitation of this vulnerability could allow remote attacker to gain unauthorized access and take complete control of the targeted device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Matrixcomsec/Cosec Vega Faxq Firmware
cpe:2.3:o:matrixcomsec:cosec_vega_faxq_firmware:*:*:*:*:*:*:*:*
Range: <v2r17
Matrix Org/Cosec Vega FAXQllm-create
Matrix Org/Matrix Door Controller Cosec Vega Faxqv5
Range: <V2R17

Patches

Vulnerability mechanics

References

www.cert-in.org.in/s2cMainServletnvdThird Party Advisory

News mentions

No linked articles in our index yet.

Severity

CriticalCVSS v3.1

9.8/ 10

CVSS v49.3

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

Probability of exploitation in the next 30 days.

0.86%

VYPR risk score

Composite of severity, exploitation, and reach.

0.64high

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Weaknesses

CWE-288
Authentication Bypass Using an Alternate Path or Channel

CVE ID

CVE-2024-10381

Credits

TV
This vulnerability is reported by Arko Dhar and Souvik Kandar from Redinent Innovations Engineering & Research Team, Karnataka, India.
finder