Avtec Outpost Storage of File with Sensitive Data Under Web Root

8.7 CVSS

Vulnerability Description

Avtec Outpost stores sensitive information in an insecure location without proper access controls in place.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-39776

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Jonathan Fournier of Field Effect reported these vulnerabilities to CISA.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-235-04

More from Avtec

View All →

CVE-2024-42418

Avtec Outpost Use of Hard-coded Cryptographic Key

High 8.7

Affected Vendor

Avtec

View all reports →

Affected Software

Outpost 0810, Outpost Uploader Utility

Vulnerable Versions:

Timeline

Official Publish: August 22nd, 2024

Last Modified: August 22nd, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-219

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.