CVE-2024-24486

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-24486
An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the SAVE EEP_DATA command.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 Third Party Advisory
https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:silextechnology:ds-600_firmware:1.4.1:*:*:*:*:*:*:*
cpe:2.3:h:silextechnology:ds-600:-:*:*:*:*:*:*:*
History

10 Apr 2025, 13:39

Type Values Removed Values Added
First Time Silextechnology
Silextechnology ds-600
Silextechnology ds-600 Firmware
CPE cpe:2.3:h:silextechnology:ds-600:-:*:*:*:*:*:*:*
cpe:2.3:o:silextechnology:ds-600_firmware:1.4.1:*:*:*:*:*:*:*
References () https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 - () https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 - Third Party Advisory

21 Nov 2024, 08:59

Type Values Removed Values Added
References () https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 - () https://raw.githubusercontent.com/MostafaSoliman/Security-Advisories/master/CVE-2024-24486 -

01 Aug 2024, 13:47

Type Values Removed Values Added
CWE CWE-94 CWE-284

08 Jul 2024, 14:17

Type Values Removed Values Added
CWE CWE-94
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1

16 Apr 2024, 13:24

Type Values Removed Values Added
Summary
  • (es) Un problema descubierto en silex technology DS-600 Firmware v.1.4.1, permite a un atacante remoto editar la configuración del dispositivo mediante el comando SAVE EEP_DATA.

15 Apr 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-15 19:15

Updated : 2025-04-10 13:39

NVD link : CVE-2024-24486

Mitre link : CVE-2024-24486

CVE.ORG link : CVE-2024-24486

JSON object : View

Products Affected

silextechnology

  • ds-600_firmware
  • ds-600
CWE
CWE-284

Improper Access Control