CVE-2024-32755

Published Jul 2, 2024

Last updated 5 months ago

CVSS critical 9.1
ICS

Overview

Description
Under certain circumstances the web interface will accept characters unrelated to the expected input.
Source
productsecurity@jci.com
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.1
Impact score
6
Exploitability score
2.3
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

productsecurity@jci.com
CWE-20

Social media

Hype score
Not currently trending

Related CVEs

  1. CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communication platform when a large number of OPC UA requests are sent to the platform.•CVE-2024-10085
  2. Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability•CVE-2026-16812
  3. Check Point SmartConsole Improper Authentication Vulnerability•CVE-2026-16232
  4. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability•CVE-2026-58644
  5. Microsoft SharePoint Deserialization of Untrusted Data Vulnerability •CVE-2026-50522

References

Sources include official advisories and independent security research.