CVE-2024-28144: Image Access GmbH SCAN2NET

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interface from the same IP they are logged in as the other user.

Affected products

• Image Access GmbH SCAN2NET: up to and including 7.42B

Published 2024-12-12. Last modified 2026-06-17.