CVE-2024-45367

The web server for ONS-S8 - Spectra Aggregation Switch includes an incomplete authentication process, which can lead to an attacker authenticating without a password.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - ics-cert@hq.dhs.gov

Published

2024-10-03

Last modified

2024-10-04

Weaknesses

CWE-1390

Affected products

• Ons-s8 Firmware (Optigo)
• Ons-s8 Spectra Aggregation Switch (Optigo Networks)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-275-01