CVE-2024-5404

CRITICAL CVSS: 9.8 Published: 2024-06-03 Modified: 2026-06-17

Description

An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism.

Affected Platforms

Unknown

Weakness Type

CWE-640

References