What’s Vulnerable › Vulnerabilities

CVE-2024-39886

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-10 · updated 2026-06-17
• Weakness: CWE-419

Description

TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App.

Affected products

• DREAM TRAIN INTERNET INC. TONE store App: through version 3.4.2

References

• https://jvn.jp/en/jp/JVN28515217/
• https://tone.ne.jp/vulnerability/14492007.html
• https://jvn.jp/en/jp/JVN28515217/
• https://tone.ne.jp/vulnerability/14492007.html

Get alerted when CVE-2024-39886 or the next vulnerability affects your stack