CVE-2024-24485

An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to obtain sensitive information via the GET EEP_DATA command.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:silextechnology:ds-600_firmware:1.4.1:*:*:*:*:*:*:*
cpe:2.3:h:silextechnology:ds-600:-:*:*:*:*:*:*:*

History

10 Apr 2025, 13:39

Type Values Removed Values Added
First Time Silextechnology
Silextechnology ds-600
Silextechnology ds-600 Firmware
References () https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2024-24485 - () https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2024-24485 - Third Party Advisory
CPE cpe:2.3:h:silextechnology:ds-600:-:*:*:*:*:*:*:*
cpe:2.3:o:silextechnology:ds-600_firmware:1.4.1:*:*:*:*:*:*:*

21 Nov 2024, 08:59

Type Values Removed Values Added
References () https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2024-24485 - () https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2024-24485 -

01 Aug 2024, 13:47

Type Values Removed Values Added
CWE CWE-284
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5

16 Apr 2024, 13:24

Type Values Removed Values Added
Summary
  • (es) Un problema descubierto en silex technology DS-600 Firmware v.1.4.1, permite a un atacante remoto obtener información confidencial a través del comando GET EEP_DATA.

15 Apr 2024, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-15 19:15

Updated : 2025-04-10 13:39


NVD link : CVE-2024-24485

Mitre link : CVE-2024-24485

CVE.ORG link : CVE-2024-24485


JSON object : View

Products Affected

silextechnology

  • ds-600_firmware
  • ds-600
CWE
CWE-284

Improper Access Control