Unrated severityNVD Advisory· Published Oct 22, 2024· Updated Oct 22, 2024
CVE-2024-9677
CVE-2024-9677
Description
The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version V1.21 and earlier versions could allow an authenticated local attacker to gain privilege escalation by stealing the authentication token of a login administrator. Note that this attack could be successful only if the administrator has not logged out.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<= V1.21+ 1 more
- (no CPE)range: <= V1.21
- (no CPE)range: <= V1.21
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.