CVE-2024-8878

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05.

CVSS v4.0

10.0 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.26% chance of exploitation in the next 30 days, 68th percentile

Published

2024-09-24

Updated

2025-11-04

Proof-of-concept exploits (1)

• https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html

References

• CVE Record
• NVD entry

Related

• CVE-2024-8877
• CVE-2024-8883
• CVE-2024-8876
• CVE-2024-8902
• CVE-2024-8875
• CVE-2024-8904