CVE-2024-8878 - CVE House
Back to Database
Status published Critical CVE-2024-8878

Unauthenticated Password Reset

Vulnerability Description

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8878

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • D. Blagojevic (CyberDanube)
  • S. Dietz (CyberDanube)
  • T. Weber (CyberDanube)

References

More from Riello

View All →
CVE-2025-68916
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../...
Critical 9.1
CVE-2025-68915
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS...
Medium 5.5
CVE-2025-68914
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username...
Medium 6.5
CVE-2024-8877
SQL Injection
Medium 6.9

Affected Vendor

Affected Software

Netman 204
Vulnerable Versions:
0

Timeline

Official Publish: September 24th, 2024
Last Modified: November 4th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-640

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.