CVE-2024-43032 - autMan v2.9.6 allows attackers to bypass authentication via a crafted web request

MEDIUM

autMan v2.9.6 allows attackers to bypass authentication via a crafted web request

Published Aug 23, 2024

4.3

MEDIUM

CVSS 3.1

EPSS 0.22%

autMan v2.9.6 allows attackers to bypass authentication via a crafted web request.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
D-Link	Autman	unknown	Affected 2.9.6

No remediation recorded yet.

Weaknesses (1)

CWE-121

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-40020		Advisory
https://github.com/hdbjlizhe/fanli/releases/tag/2.9.6		Release Notes

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 23, 2024

Updated Aug 23, 2024

Reserved Aug 5, 2024

CISA Vulnrichment

Updated Aug 23, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 23, 2024

Updated Aug 23, 2024

GitHub

No data