CVE-2024-48852

CriticalCVSS 9.4/10Last modified Jun 17, 2026

Description

Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through https access.

This issue affects FLXEON through <= 9.3.4.

Metrics

CVSS 3.1 9.4/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Jan 29, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-488539.0An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT uCVE-2024-488547.5Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an informatioCVE-2024-488557.5Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an informatCVE-2024-488569.8Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-ofCVE-2024-488577.5NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a deniCVE-2024-488587.5Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denCVE-2024-488599.1An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerabilityCVE-2024-48864.3The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the requestCVE-2024-488609.8An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remoCVE-2024-488617.8An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow locaCVE-2024-488629.8A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traCVE-2024-488639.8A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers t
CVE-2024-48852: Critical severity, CVSS 9.4 | Vulnix