Medium severity · published Jan 19, 2024
CVE-2024-0716
Byzoro Smart S150 Management Platform Backup File download.php information disclosure
5.3
CVSS
1.2%
EPSS
No
On KEV
Description
A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15. This affects an unknown part of the file /log/download.php of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-251541 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Smart S150 Management Platform · Byzoro
V31R02B15 · source: vendor
SS
Smart S150 Firmware · Byzoro
31r02b15 · source: NVD
SS
Smart S150 · Byzoro
V31R02B15 · source: CISA