CVE-2024-42018
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Atos Eviden SMC xScale是法国Atos公司的一款数据驱动程序。 Atos Eviden SMC xScale 1.6.6之前版本存在安全漏洞，该漏洞源于节点初始化过程中，用于初始化的配置参数包含凭证信息，这些参数在管理节点上缺乏访问控制机制，且在磁盘节点重启后，防止未授权用户访问的缓解措施失效。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-42018
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in Atos Eviden SMC xScale before 1.6.6. During initialization of nodes, some configuration parameters are retrieved from management nodes. These parameters embed credentials whose integrity and confidentiality may be important to the security of the HPC configuration. Because these parameters are needed for initialization, there is no available mechanism to ensure access control on the management node, and a mitigation measure is normally put in place to prevent access to unprivileged users. It was discovered that this mitigation measure does not survive a reboot of diskful nodes. (Diskless nodes are not at risk.) The mistake lies in the cloudinit configuration: the iptables configuration should have been in the bootcmd instead of the runcmd section.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Atos Eviden SMC xScale 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Atos Eviden SMC xScale是法国Atos公司的一款数据驱动程序。 Atos Eviden SMC xScale 1.6.6之前版本存在安全漏洞，该漏洞源于节点初始化过程中，用于初始化的配置参数包含凭证信息，这些参数在管理节点上缺乏访问控制机制，且在磁盘节点重启后，防止未授权用户访问的缓解措施失效。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2024-42018
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-42018
请登录查看更多情报信息。
Same Patch Batch · n/a · 2024-10-11 · 41 CVEs total
| CVE-2024-21534 | 9.8 CRITICAL | JSONPath Plus 安全漏洞 |
| CVE-2024-35522 | 8.4 HIGH | NETGEAR EX3700 安全漏洞 |
| CVE-2024-35517 | 8.4 HIGH | NETGEAR XR1000 安全漏洞 |
| CVE-2024-9855 | 4.7 MEDIUM | 07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload |
| CVE-2024-9856 | 2.4 LOW | 07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting |
| CVE-2024-48774 | Fermax com.fermax.vida 安全漏洞 | |
| CVE-2024-48788 | Messe Frankfurt com.yescam.YesCam.zwave 安全漏洞 | |
| CVE-2024-48778 | Giant Bicycles RideLink 安全漏洞 | |
| CVE-2024-48937 | Znuny 安全漏洞 | |
| CVE-2024-48776 | Shelly com.home.shelly 安全漏洞 | |
| CVE-2024-48787 | Revic Optics Revic Ops 安全漏洞 | |
| CVE-2024-48769 | BURG-WCHTER KG de.burgwachter.keyapp.app 安全漏洞 | |
| CVE-2024-48771 | Almando Play 安全漏洞 | |
| CVE-2024-48775 | Plug n Play Camera com.ezset.delaney 安全漏洞 | |
| CVE-2024-46532 | OpenHIS 安全漏洞 | |
| CVE-2024-48786 | SwitchBot 安全漏洞 | |
| CVE-2024-46215 | GIGA WIFI Wave KM08-708H 安全漏洞 | |
| CVE-2024-48784 | SAMPMAX com.sampmax.homemax 安全漏洞 | |
| CVE-2024-48938 | Znuny 安全漏洞 | |
| CVE-2024-48772 | C-CHIP 安全漏洞 |
Showing top 20 of 41 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-42018
No comments yet