« Volver al listado

CVE-2024-4225

Estado: AplazadaAlta (7.6)—

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

DPS Telecom — Netguardian DIN Remote Telemetry UnitAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-4225",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-4225",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-05-08T17:47:59.124226Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve_disclosure@tech.gov.sg",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.6,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.5,
        "exploitabilityScore": 2.1
      }
    ]
  },
  "affected": [
    {
      "source": "cve_disclosure@tech.gov.sg",
      "affectedData": [
        {
          "vendor": "DPS Telecom",
          "product": "NetGuardian DIN Remote Telemetry Unit (RTU)",
          "versions": [
            {
              "status": "affected",
              "version": "NGDIN_ST App v2.0D.0062"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:h:dpstele:ngdin_st:2.0d.0062:*:*:*:*:*:*:*"
          ],
          "vendor": "dpstele",
          "product": "ngdin_st",
          "versions": [
            {
              "status": "affected",
              "version": "2.0d.0062"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-04-30T07:15:49.107",
  "references": [
    {
      "url": "https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html",
      "source": "cve_disclosure@tech.gov.sg"
    },
    {
      "url": "https://govtech-csg.github.io/security-advisories/2024/04/29/CVE-2024-4225.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve_disclosure@tech.gov.sg",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF)."
    },
    {
      "lang": "es",
      "value": "DPS Telecom ha descubierto múltiples vulnerabilidades de seguridad en la interfaz web de la Unidad de Telemetría Remota (RTU) DIN NetGuardian. Los atacantes pueden aprovechar esas vulnerabilidades de seguridad para realizar acciones críticas como escalar los privilegios del usuario, robar la credencial del usuario, Cross Site Scripting (XSS) y Cross-Site Request Forgery (CSRF)."
    }
  ],
  "lastModified": "2026-06-17T08:01:21.933",
  "sourceIdentifier": "cve_disclosure@tech.gov.sg"
}