Skip to main content
CRITICAL

CVE-2024-28200

CVSS v3

9.8

CRITICAL

EPSS Score

56.1 %

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.

Technical details

Published
2024-07-01

Frequently asked questions

What is CVE-2024-28200?

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.

Is CVE-2024-28200 actively exploited?

Active exploitation of CVE-2024-28200 has not been confirmed. The EPSS score is 56.1%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2024-28200?

CVE-2024-28200 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2024-28200 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

No credit card required · 30 free checks/month · Free API key