CVE-2024-4225

HighCVSS 7.6/10Last modified Jun 17, 2026

Description

Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), by DPS Telecom. Attackers can exploit those security vulnerabilities to perform critical actions such as escalate user's privilege, steal user's credential, Cross Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).

Metrics

CVSS 3.1 7.6/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
DPS TelecomNetGuardian DIN Remote Telemetry Unit (RTU)NGDIN_ST App v2.0D.0062
dpstelengdin_st2.0d.0062

References

Timeline

Published
Apr 30, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-422505.5In the Linux kernel, the following vulnerability has been resolved: cachefiles: add missing lock protection when polling Add missing lock CVE-2024-422515.5In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below bug was reported onCVE-2024-422525.5In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to WARN_ON() If a BUG_ON() can be hit in theCVE-2024-422534.7In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Ensure that `i2c_lCVE-2024-422545.5In the Linux kernel, the following vulnerability has been resolved: io_uring: fix error pbuf checking Syz reports a problem, which boils dCVE-2024-422555.5In the Linux kernel, the following vulnerability has been resolved: tpm: Use auth only after NULL check in tpm_buf_check_hmac_response() DCVE-2024-422569.8In the Linux kernel, the following vulnerability has been resolved: cifs: Fix server re-repick on subrequest retry When a subrequest is maCVE-2024-422577.8In the Linux kernel, the following vulnerability has been resolved: ext4: use memtostr_pad() for s_volume_name As with the other strings iCVE-2024-422585.5In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bCVE-2024-422595.5In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation CalculCVE-2024-42263.5It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and pCVE-2024-422605.5In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Validate passed in drm syncobj handles in the performance exte
CVE-2024-4225: High severity, CVSS 7.6 | Vulnix