CVE-2024-2371 - CVE House
Back to Database
Status published Medium CVE-2024-2371

Information exposure vulnerability in Korenix JetI/O 6550

Vulnerability Description

Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2371

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • HADESS

References

More from Korenix

View All →
CVE-2024-7397
Unauthenticated Command Injection
Critical 9.3
CVE-2024-7396
Plaintext Communication
High 7.1
CVE-2024-7395
Insufficient Authentication
Critical 9.3
CVE-2024-11303
Path Traversal
High 8.7
CVE-2023-5376
TFTP Without Authentication
High 8.6

Affected Vendor

Affected Software

JetI/O 6550
Vulnerable Versions:
F208 Build:0817

Timeline

Official Publish: March 12th, 2024
Last Modified: August 1st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories
Collection
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1041 Exfiltration Over C2 Channel
Exfiltration