CVE-2024-8878

10.0 criticalEPSS 1.3%

Critical (10.0) in riello-ups netman 204 firmware. EPSS 1.3% chance of exploitation in the next 30 days.

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.

Severity

CVSS 4.0

10.0 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-640
Published: 2024-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

riello-ups:netman_204_firmware

References

https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html
http://seclists.org/fulldisclosure/2024/Sep/50

Check your stack JSON