CVE-2024-31200

4.6 mediumEPSS 0.2%

Medium (4.6) in proges sensor net connect firmware v2. EPSS 0.2% chance of exploitation in the next 30 days.

A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext when an administrative session is open in the browser.

Severity

CVSS 3.1

4.6 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-201
Published: 2024-07-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

proges:sensor_net_connect_firmware_v2

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31200

Check your stack JSON