CVE-2024-6981 CRITICAL

CVE-2024-6981: OMNTEC Proteus Tank Monitoring Missing Authentication for Critical Function

Vendor Omntec
Product Proteus Tank Monitoring
Weakness CWE-306 · Missing auth
Published September 27, 2024
Last update September 27, 2024

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

OMNTEC Proteus Tank Monitoring OEL8000III Series could allow an attacker to perform administrative actions without proper authentication.

Key dates

02Disclosure timeline

September 27, 2024 CVE published
September 27, 2024 Record updated