CVE-2024-38465

MEDIUM

Shenzhen Guoxin Synthesis <8.3.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error.

References (1)

Scores

CVSS v3 5.3
EPSS 0.0012
EPSS Percentile 30.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-203
Status published
Products (1)
guoxinled/synthesis_image_system < 8.3.0
Published Jun 16, 2024
Tracked Since Feb 18, 2026