KEVIntel

Vulnerability detail

Enriched intelligence for a single CVE

Back to KEVs

6.9

CVSS
Medium

CVE-2024-8877

PUBLISHED

SQL Injection

Exploited in the wild Remote Low complexity No user interaction

Vendor: Riello
Product: Netman 204
Published: Sep 24, 2024
EPSS: —

Description

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05.

nuclei_scanner

CVSS scores

CVSS v4.0 6.9 Medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Exploitation status

Exploited in the wild

Recorded 2025-06-26 00:00:00 UTC · Source

SSVC decision points

Exploitation: poc
Automatable: Yes
Technical impact: total

References

https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
The Shadowserver (via CIRCL)	Jun 26, 2025

Scanner integrations

Scanner	Reference	Detected
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8877.yaml	Apr 25, 2025

Timeline

CVE ID Reserved

September 15, 2024
CVE Published to Public

September 24, 2024
Detected by Nuclei

April 25, 2025
Added to KEVIntel

June 26, 2025