Authentication Bypass Using an Alternate Path or Channel in Positron Broadcast Signal Processor TRA7005

8.7 CVSS

Vulnerability Description

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-7007

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

CISA discovered a public proof of concept (PoC) as authored by Gjoko Krstic and reported it to Positron.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02

Affected Vendor

Positron S.R.L

View all reports →

Affected Software

Broadcast Signal Processor TRA7005

Vulnerable Versions:

v1.20

Timeline

Official Publish: July 25th, 2024

Last Modified: August 1st, 2024

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-288

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1078 Valid Accounts

Persistence

T1550 Use Alternate Authentication Material

Defense Evasion

T1021 Remote Services

Lateral Movement

T1098 Account Manipulation

Privilege Escalation