Main Vulnerability Database Vulnerabilities #VU86343

Improper access control in Qolsys IQ Panel 4 and Qolsys IQ4 Hub - CVE-2024-0242

Published: February 12, 2024

Vulnerability identifier: #VU86343

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-0242

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Qolsys

Affected software:
Qolsys IQ Panel 4
Qolsys IQ4 Hub

Detailed vulnerability description

The vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. An attacker with physical access can gain unauthorized access to settings.

Install updates from vendor's website.