CVE-2024-6758
MEDIUMDescription
Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments.
Is your site exposed to CVE-2024-6758?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| sprecher-automation | sprecon-e_cp-2500_firmware |
| sprecher-automation | sprecon-e_cp-2500 |
| sprecher-automation | sprecon-e-p_dd6-2_firmware |
| sprecher-automation | sprecon-e-p_dd6-2 |
| sprecher-automation | sprecon-e-c_firmware |
| sprecher-automation | sprecon-e-c |
| sprecher-automation | sprecon-e_ap-2200_firmware |
| sprecher-automation | sprecon-e_ap-2200 |
| sprecher-automation | sprecon-e_cp-2131_firmware |
| sprecher-automation | sprecon-e_cp-2131 |
| sprecher-automation | sprecon-e_cp-2330_firmware |
| sprecher-automation | sprecon-e_cp-2330 |
| sprecher-automation | sprecon-e-p_dq6-1_firmware |
| sprecher-automation | sprecon-e-p_dq6-1 |
| sprecher-automation | sprecon-e-p_dl6-1_firmware |
| sprecher-automation | sprecon-e-p_dl6-1 |
| sprecher-automation | sprecon-e-p_ds6-0_firmware |
| sprecher-automation | sprecon-e-p_ds6-0 |
| sprecher-automation | sprecon-edir_firmware |
| sprecher-automation | sprecon-edir |
| sprecher-automation | sprecon-e-t3_firmware |
| sprecher-automation | sprecon-e-t3 |
| sprecher-automation | sprecon-e-t3_ax-3110_firmware |
| sprecher-automation | sprecon-e-t3_ax-3110 |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-6758? +
How severe is CVE-2024-6758? +
What products are affected by CVE-2024-6758? +
How do I check if I'm vulnerable to CVE-2024-6758? +
Related Vulnerabilities
Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior …
This vulnerability exists in RupeeWeb trading platform due to insufficient authorization controls on certain API endpoints handling addition and deletion …
An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app …
A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, and 5.4.0 before 5.4.10 allows remote, …
An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute …
An incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user …