CVE-2024-7396

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: through 1.2.

Metrics

CVSS 4.0 7.1/10CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-311

Affected software

No affected versions have been published.

Timeline

Published
Aug 5, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-73979.3Improper filering of special characters result in a command ('command injection') vulnerability in Korenix JetPort 5601v3.This issue affectsCVE-2024-73985.4Concrete CMS versions 9 through 9.3.3 and versions below 8.5.19 are vulnerable to stored XSS in the calendar event addition feature because CVE-2024-73999.8Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackCVE-2024-74008.5The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operCVE-2024-74017.5Netskope was notified about a security gap in Netskope Client enrollment process where NSClient is using a static token “Orgkey” as authentiCVE-2024-74027.0Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamper the Netskope ClieCVE-2024-74046.5An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and stCVE-2024-74078.2Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded CVE-2024-74086.5This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plain text during AP paiCVE-2024-74097.5A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during sockCVE-2024-74105.3The My Custom CSS PHP & ADS plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.3. This is duCVE-2024-74115.3The Newsletters plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.9.9. This is due the plug
CVE-2024-7396: High severity, CVSS 7.1 | Vulnix