CVE-2024-28200

CRITICAL

CVSS v3

9.8

CRITICAL

EPSS Score

56.1%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.

Technical Details

Published
7/1/2024

Frequently Asked Questions

What is CVE-2024-28200?

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2. This vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.

Is CVE-2024-28200 actively exploited?

Active exploitation of CVE-2024-28200 has not been confirmed. The EPSS score is 56.1%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2024-28200?

CVE-2024-28200 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2024-28200 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.