CVE-2024-45168

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable.

CVSS v3.1 CNA

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.69% chance of exploitation in the next 30 days, 52nd percentile

Published

2024-08-22

Proof-of-concept exploits (1)

• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-049.txt

Security advisories

• https://uci.de/download/idol2-client.html
• https://uci.de/products/index.html
• https://www.syss.de/en/responsible-disclosure-policy

References

• CVE Record
• NVD entry