Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
No data.
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 23 Sep 2024 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Securepoint
Securepoint unified Threat Management |
|
| CPEs | cpe:2.3:o:securepoint:unified_threat_management:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Securepoint
Securepoint unified Threat Management |
|
| Metrics |
ssvc
|
Mon, 23 Sep 2024 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A security vulnerability has been discovered in the handling of OTP keys in the authentication system of Securepoint UTM. This vulnerability allows the bypassing of second-factor verification (when OTP is enabled) in both the administration web interface and the user portal. Affected versions include UTM 11.5 to 12.6.4 and the Reseller Preview version 12.7.0. The issue has been fixed in UTM versions 12.6.5 and 12.7.1. | The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification (when OTP is enabled) in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has been fixed in UTM 12.6.5 and 12.7.1. |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-23T14:52:47.331Z
Reserved: 2024-06-24T00:00:00.000Z
Link: CVE-2024-39340
Vulnrichment
Updated: 2024-08-02T04:26:14.259Z
NVD
Status : Deferred
Published: 2024-07-12T13:15:12.057
Modified: 2026-04-15T00:35:42.020
Link: CVE-2024-39340
Redhat
No data.
OpenCVE Enrichment
No data.