{"id":"CVE-2024-8878","state":"PUBLISHED","title":"Unauthenticated Password Reset","description":"The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.","publishedAt":"2024-09-24T15:14:31.153Z","updatedAt":"2025-11-04T16:16:08.912Z","severity":{"score":10,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","source":"CyberDanube"},"assigner":"CyberDanube","products":["Riello Netman 204"],"affected":[{"vendor":"Riello","product":"Netman 204","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"4.05","versionType":"custom"}]}],"references":["https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html","http://seclists.org/fulldisclosure/2024/Sep/50"],"weaknesses":["CWE-640"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/8xxx/CVE-2024-8878.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-8878","state":"PUBLISHED","datePublished":"2024-09-24T15:14:31.153Z","dateUpdated":"2025-11-04T16:16:08.912Z","assignerShortName":"CyberDanube","assignerOrgId":"7d092a75-6bbd-48c6-a15a-0297458009bc","dateReserved":"2024-09-15T08:33:35.591Z"},"containers":{"cna":{"title":"Unauthenticated Password Reset","descriptions":[{"lang":"en","value":"The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05."}],"affected":[{"vendor":"Riello","product":"Netman 204","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"4.05","versionType":"custom"}]}],"references":[{"url":"https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html","tags":["third-party-advisory","exploit"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":10,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-640","description":"CWE-640 Weak Password Recovery Mechanism for Forgotten Password","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CyberDanube","orgId":"7d092a75-6bbd-48c6-a15a-0297458009bc","dateUpdated":"2024-09-24T15:14:31.153Z"},"credits":[{"lang":"en","type":"finder","value":"D. Blagojevic (CyberDanube)"},{"lang":"en","type":"finder","value":"S. Dietz (CyberDanube)"},{"lang":"en","type":"finder","value":"T. Weber (CyberDanube)"}],"impacts":[{"capecId":"CAPEC-50","descriptions":[{"lang":"en","value":"CAPEC-50 Password Recovery Exploitation"}]}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"riello-ups","product":"netman_204_firmware","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"4.05","versionType":"custom"}],"cpes":["cpe:2.3:o:riello-ups:netman_204_firmware:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-27T15:23:28.224407Z","id":"CVE-2024-8878","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-27T15:24:07.959Z"}},{"title":"CVE Program Container","references":[{"url":"http://seclists.org/fulldisclosure/2024/Sep/50"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-04T16:16:08.912Z"}}]}}}