CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-8310

Medium Severity
SVRS
30/100

CVSSv3
NA/10

EPSS
0.00238/1

CVE-2024-8310 affects OPW Fuel Management Systems SiteSentinel, enabling attackers to bypass authentication for full admin access. This authentication bypass vulnerability allows unauthorized individuals to gain complete control over the fuel management system. Despite a low SVRS of 30, indicating lower immediate risk compared to critical vulnerabilities, organizations using SiteSentinel should still address this issue promptly. The vulnerability, categorized as CWE-306 (Missing Authentication for Critical Function), could lead to unauthorized access, data breaches, and manipulation of fuel management operations. Successful exploitation can result in significant operational disruptions and financial losses. While the CVSS score is 0, the "In The Wild" tag suggests potential active exploitation, increasing the importance of patching. Therefore, applying available security updates is crucial to mitigate potential risks.

In The Wild
2024-09-27

2024-09-30

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CISA Releases Industrial Control Systems Advisories to Defend Against Cyber Attacks
Dhivya2024-09-26
CISA Releases Industrial Control Systems Advisories to Defend Against Cyber Attacks | The Cybersecurity and Infrastructure Security Agency (CISA) released eight new Industrial Control Systems (ICS) advisories. These advisories address pressing security issues, vulnerabilities, and exploits affecting ICS. ICSA-24-268-01 OPW Fuel Management Systems SiteSentinel A critical vulnerability in OPW Fuel Management Systems’ SiteSentinel, identified as CVE-2024-8310. With a CVSS v4 score of 9.3, this vulnerability allows attackers […] The post CISA Releases Industrial Control Systems Advisories to
cve-2024-6787
cve-2019-12256
cve-2024-45066
cve-2019-12262
OPW Fuel Management Systems SiteSentinel
CISA2024-09-24
OPW Fuel Management Systems SiteSentinel | View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: OPW Fuel Managements Systems <
c
at
sector
states

Social Media

CVE-2024-8310 (CVSS:9.8, CRITICAL) is Awaiting Analysis. OPW Fuel Management Systems SiteSentinel could allow an attacker to bypass authentication to the server and obtain full..https://t.co/qUQodYbtoL #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
0
0
0
[CVE-2024-8310: CRITICAL] OPW Fuel Management Systems SiteSentinel could allow an attacker to bypass authentication to the server and obtain full admin privileges.#cybersecurity,#vulnerability https://t.co/qoddbKU7EO https://t.co/MaeKoo9kI6
0
0
0

Affected Software

No affected software found for this CVE

References

ReferenceLink
[email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-01

CWE Details

CWE IDCWE NameDescription
CWE-306Missing Authentication for Critical FunctionThe software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence