CVE-2024-24279

An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower functions.
Configurations

No configuration.

History

21 Nov 2024, 08:59

Type Values Removed Values Added
References () https://github.com/BossSecuLab/Vulnerability_Reporting/security/advisories/GHSA-9fj6-vr9p-px49 - () https://github.com/BossSecuLab/Vulnerability_Reporting/security/advisories/GHSA-9fj6-vr9p-px49 -

27 Aug 2024, 18:35

Type Values Removed Values Added
CWE CWE-261
CWE-287
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8

09 Apr 2024, 12:48

Type Values Removed Values Added
Summary
  • (es) Un problema en secdiskapp 1.5.1 (programa de administración para NewQ Fingerprint Encryption Super Speed Flash Disk) permite a los atacantes obtener privilegios elevados a través de las funciones vsVerifyPassword y vsSetFingerPrintPower.

08 Apr 2024, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-08 20:15

Updated : 2024-11-21 08:59


NVD link : CVE-2024-24279

Mitre link : CVE-2024-24279

CVE.ORG link : CVE-2024-24279


JSON object : View

Products Affected

No product.

CWE
CWE-261

Weak Encoding for Password

CWE-287

Improper Authentication