CVE-2024-36523

Exploit

EPSS 0.09%
Published 12.06.2024 21:15:50
Last modified 13.06.2025 14:46:07
Source cve@mitre.org
Teams watchlist Login
Open Login

An access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in the application after deleting their own or administrator accounts. This is provided that the users do not log out of their deleted accounts.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Wvp-pro ≫ Gb28181 Version2.0 SwEditionpro

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.256

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-613 Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

https://github.com/648540858/wvp-GB28181-pro/issues/1456

Exploit

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2024-36523

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-36523

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-36523

EUVD