CVE-2024-45032

A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do not properly validate the device tokens. This could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system.

• CWE-639

• https://cert-portal.siemens.com/productcert/html/ssa-359713.html

Published

Sep 10, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45027In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45028In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45029In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-4503A vulnerability classified as critical was found in Ruijie R…7.2
• CVE-2024-45030In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45031When editing objects in the Syncope Console, incomplete HTML…6.1
• CVE-2024-45033Insufficient Session Expiration vulnerability in Apache Airf…8.1
• CVE-2024-45034Apache Airflow versions before 2.10.1 have a vulnerability t…8.8
• CVE-2024-45036Tophat is a mobile applications testing harness. An Improper…4.3
• CVE-2024-45037The AWS Cloud Development Kit (CDK) is an open-source framew…6.4
• CVE-2024-45038Meshtastic device firmware is a firmware for meshtastic devi…7.5
• CVE-2024-45039gnark is a fast zk-SNARK library that offers a high-level AP…6.2