CVE-2024-10128 MEDIUM

CVE-2024-10128: Topdata Inner Rep Plus WebServer td.js.gz risky encryption

Vendor Topdata
Product Inner Rep Plus WebServer
Weakness CWE-327 · Broken crypto
Published October 18, 2024
Last update October 21, 2024

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been rated as problematic. Affected by this issue is some unknown functionality of the file td.js.gz. The manipulation leads to risky cryptographic algorithm. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Key dates

02Disclosure timeline

October 18, 2024 CVE published
October 21, 2024 Record updated