CVE-2024-7007
Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2024-07-25
- Last modified
- 2024-08-01
- Weaknesses
- CWE-288, CWE-306
Affected products
- Tra7005 Firmware (Positron)
- Broadcast Signal Processor Tra7005 (Positron S.r.l)
- Broadcast Signal Processor Tra7005 (Positronsrl)
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02