CVE-2024-24279

An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower functions.
Configurations

Configuration 1 (hide)

cpe:2.3:a:secdiskapp:secdiskapp:1.5.1:*:*:*:*:*:*:*

History

17 Jun 2025, 18:23

Type Values Removed Values Added
References () https://github.com/BossSecuLab/Vulnerability_Reporting/security/advisories/GHSA-9fj6-vr9p-px49 - () https://github.com/BossSecuLab/Vulnerability_Reporting/security/advisories/GHSA-9fj6-vr9p-px49 - Exploit, Vendor Advisory
CPE cpe:2.3:a:secdiskapp:secdiskapp:1.5.1:*:*:*:*:*:*:*
First Time Secdiskapp secdiskapp
Secdiskapp

21 Nov 2024, 08:59

Type Values Removed Values Added
References () https://github.com/BossSecuLab/Vulnerability_Reporting/security/advisories/GHSA-9fj6-vr9p-px49 - () https://github.com/BossSecuLab/Vulnerability_Reporting/security/advisories/GHSA-9fj6-vr9p-px49 -

27 Aug 2024, 18:35

Type Values Removed Values Added
CWE CWE-287
CWE-261
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8

09 Apr 2024, 12:48

Type Values Removed Values Added
Summary
  • (es) Un problema en secdiskapp 1.5.1 (programa de administración para NewQ Fingerprint Encryption Super Speed Flash Disk) permite a los atacantes obtener privilegios elevados a través de las funciones vsVerifyPassword y vsSetFingerPrintPower.

08 Apr 2024, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-08 20:15

Updated : 2025-06-17 18:23


NVD link : CVE-2024-24279

Mitre link : CVE-2024-24279

CVE.ORG link : CVE-2024-24279


JSON object : View

Products Affected

secdiskapp

  • secdiskapp
CWE
CWE-261

Weak Encoding for Password

CWE-287

Improper Authentication