CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware Version v3.0.0.1889_23031701) allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such as brute-forcing of passwords. The vulnerability arises from the application responding differently to login attempts with valid and invalid usernames.

• CWE-203

• https://github.com/rosembergpro/CVE-2024-48644

Published

Oct 22, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-48633D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were di…8
• CVE-2024-48634D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were di…8
• CVE-2024-48635D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were di…8
• CVE-2024-48636D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were di…8
• CVE-2024-48637D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were di…8
• CVE-2024-48638D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were di…8
• CVE-2024-48645In Minecraft mod "Command Block IDE" up to and including ver…7.5
• CVE-2024-48646An Unrestricted File Upload vulnerability exists in Sage 100…8.1
• CVE-2024-48647A file disclosure vulnerability exists in Sage 1000 v7.0.0. …7.2
• CVE-2024-48648A Reflected Cross-Site Scripting (XSS) vulnerability exists …6.1
• CVE-2024-4865The Happy Addons for Elementor plugin for WordPress is vulne…5.4
• CVE-2024-48651In ProFTPD through 1.3.8b before cec01cc, supplemental group…7.5