[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frPiLJdogCCnVTOHk5enrmqG1Gu1mj6Qc4WzjnV_xsyM":3,"g5a-risk:CVE-2024-28200":136},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":64,"weaknesses":65,"weaknessesCount":80,"isActivelyExploited":81,"cisaInfo":29,"otxData":29,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":117,"notableEvents":118},"CVE-2024-28200","What is CVE-2024-28200?","The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to 2024.2.\n\nThis vulnerability was discovered through internal N-central source code review and N-able has not observed any exploitation in the wild.","The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in all deployments of N-central prior to ...","2024-07-01T21:15:03.143","2026-06-17T07:21:11.623",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"a5532a13-c4dd-4202-bef1-e0b8f2f8d12b","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N","NETWORK","LOW","NONE","UNCHANGED","HIGH",9.1,"CRITICAL",null,3.9,5.2,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},5.9,[],[],[],0.01946,[40,40,40,40,40,40,40],"Critical",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"n-able","n-central","*","cpe:2.3:a:n-able:n-central:*:*:*:*:*:*:*:*",1,[51,56,60,62],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fdocumentation.n-able.com\u002FN-central\u002FRelease_Notes\u002FGA\u002FContent\u002F2024.2%20Release%20Notes.htm","N-able",[55],"Vendor Advisory",{"url":57,"source":53,"tags":58},"https:\u002F\u002Fme.n-able.com\u002Fs\u002Fsecurity-advisory\u002FaArVy0000000673KAA\u002Fcve202428200-ncentral-authentication-bypass",[59],"Release Notes",{"url":52,"source":53,"tags":61},[55],{"url":57,"source":53,"tags":63},[59],4,[66,74],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-288","Authentication Bypass Using an Alternate Path or Channel","A product requires authentication, but the product has an alternate path or channel that does not require authentication.","","Incomplete","Base","Simple",{"id":75,"name":76,"description":77,"extendedDescription":70,"status":78,"abstraction":79,"structure":73},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class",2,false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2024-28200? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-28200, a critical severity cyber security vulnerability from 2024. The N-central server is vulnerable to an authentication...","CVE-2024-28200, CVE-2024-28200 vulnerability, CVE-2024-28200 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, n-able security, n-central vulnerability","\u002Fwhat-is\u002Fcve-2024-28200",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-28200","Cybersecurity","CVE-2024-28200, CVE-2024-28200 vulnerability, CVE-2024-28200 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":29,"Negate":29,"Nodes":110},[111],{"Operator":112,"Negate":81,"CPEMatch":113},"OR",[114],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":115,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":116,"VersionEndIncluding":29},"99868AED-F82D-4C33-990C-B749973BD9C0","2024.2",[],[119,126],{"id":120,"eventType":121,"eventTime":122,"details":123,"label":124,"color":125},"fa481661-1419-439b-9549-1eacc5ef85fb","HIGH_EPSS_DELTA","2025-12-26T04:04:08.013784+00:00","Daily EPSS score increased by 0.281 on 2024-07-03","EPSS Score Increased","red",{"id":127,"eventType":128,"eventTime":129,"details":130,"label":131,"color":132},"72424d64-457a-4b12-8bf8-e43a8792daac","LOW_EPSS_DELTA","2026-06-16T04:04:45.239642+00:00","Daily EPSS score decreased by 0.480 on 2024-07-03","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":134,"version":135},1794633331207,"2.0",{"score":137,"band":138,"action":139,"scoredAt":140},61,"Medium","Plan remediation","2026-11-13T07:04:26.294337+00:00"]