← Database

CVE-2024-39771

MEDIUM CVSS: 6.8 Published: 2024-08-28 Modified: 2026-06-17

Description

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack.

Affected Platforms

Safie Qbic Cloud Cc-2\/2LSafie Safie OneSafie Safie One FirmwareSafie Qbic Cloud Cc-2\/2L Firmware

Weakness Type

CWE-295, CWE-295

References