CVE-2024-10381

CVE-2024-10381 is a critical vulnerability affecting Matrix Door Controller Cosec Vega FAXQ and its firmware, stemming from improper session management in its web-based management interface. This flaw allows a remote attacker to gain unauthorized, complete control over the device by sending a specially crafted HTTP request. With a CVSS score of 9.8 (Critical), it presents a high-impact threat due to its network-based attack vector, low attack complexity, and complete compromise potential. While there are no known public exploits or active exploitation, the vulnerability has garnered significant community discussion, indicating awareness and potential interest from threat actors.