CVE-2024-54849: Cpplusworld CP-Vnr-3104 Firmware

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack.

Affected products

• Cpplusworld CP-Vnr-3104 Firmware: version b3223p22c02424 only

Published 2025-01-10. Last modified 2026-06-17.