CVE-2024-1104

EUVD-2024-16878
An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all users.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
Affected Products (NVD)
VendorProductVersion
areal-topkapiwebserv2
𝑥
≤ 6.2.4776
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
areal-topkapiwebserv2
𝑥
≤ 6.2.4776
ADP
Common Weakness Enumeration
References
https://www.areal-topkapi.com/en/services/security-bulletins
https://www.areal-topkapi.com/en/services/security-bulletins