CVE-2024-38877

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain Controller R9.2 (All versions), Omnivise T3000 Network Intrusion Detection System (NIDS) R9.2 (All versions), Omnivise T3000 Product Data Management (PDM) R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions), Omnivise T3000 Security Server R9.2 (All versions), Omnivise T3000 Terminal Server R9.2 (All versions), Omnivise T3000 Thin Client R9.2 (All versions), Omnivise T3000 Whitelisting Server R9.2 (All versions). The affected devices stores initial system credentials without sufficient protection. An attacker with remote shell access or physical access could retrieve the credentials leading to confidentiality loss allowing the attacker to laterally move within the affected network.

• CWE-312

• https://cert-portal.siemens.com/productcert/html/ssa-857368.htmlMitigation, Vendor Advisory
• http://seclists.org/fulldisclosure/2024/Nov/5

Published

Aug 2, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-38871Zohocorp ManageEngine Exchange Reporter Plus versions 5717 a…8.8
• CVE-2024-38872Zohocorp ManageEngine Exchange Reporter Plus versions 5717 a…8.8
• CVE-2024-38873An issue was discovered in the friendlycaptcha_official (aka…5.3
• CVE-2024-38874An issue was discovered in the events2 (aka Events 2) extens…5.4
• CVE-2024-38875An issue was discovered in Django 4.2 before 4.2.14 and 5.0 …7.5
• CVE-2024-38876A vulnerability has been identified in Omnivise T3000 Applic…7.8
• CVE-2024-38878A vulnerability has been identified in Omnivise T3000 Applic…6.5
• CVE-2024-38879A vulnerability has been identified in Omnivise T3000 Applic…9.8
• CVE-2024-3888The tagDiv Composer plugin for WordPress is vulnerable to St…6.4
• CVE-2024-38881An issue in Horizon Business Services Inc. Caterease 16.0.1.…7.5
• CVE-2024-38882An issue in Horizon Business Services Inc. Caterease 16.0.1.…9.8
• CVE-2024-38883An issue in Horizon Business Services Inc. Caterease 16.0.1.…9.1