{"id":"CVE-2024-5445","aliases":["EUVD-2024-47150","GHSA-frr6-4w4r-wrwv"],"status":"published","title":"Ecosystem Agent Insufficient Transport Layer Security","description":"Ecosystem Agent version 4 \u003c 4.1.5.2597 and Ecosystem Agent version 5 \u003c 5.1.4.2473 did not properly validate SSL/TLS certificates, which could allow a malicious actor to perform a Man-in-the-Middle and intercept traffic between the agent and N-able servers from a privileged network position.","severity":{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00295,"percentile":0.2232,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-295"],"published":"2024-08-08T22:04:11Z","modified":"2026-06-17T08:15:58Z","products":[{"vendor":"n-able","product":"ecosystem agent"}],"references":[{"url":"https://me.n-able.com/s/article/How-to-check-Ecosystem-Agent-version-in-N-central"},{"url":"https://me.n-able.com/s/article/How-to-check-Ecosystem-Agent-Version-in-N-sight"},{"url":"https://me.n-able.com/s/security-advisory/aArVy0000000BhpKAE/cve20245445-ecosystem-agent-insufficient-transport-layer-security"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5445"},{"url":"https://github.com/advisories/GHSA-frr6-4w4r-wrwv"}],"sources":{"cve":[{"id":"CVE-2024-5445","title":"Ecosystem Agent Insufficient Transport Layer Security","description":"Ecosystem Agent version 4 \u003c 4.1.5.2597 and Ecosystem Agent version 5 \u003c 5.1.4.2473 did not properly validate SSL/TLS certificates, which could allow a malicious actor to perform a Man-in-the-Middle and intercept traffic between the agent and N-able servers from a privileged network position.","status":"published","published":"2024-08-08T22:04:11.534Z","modified":"2025-01-07T19:48:40.594Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:34:01.286506Z"}],"euvd":[{"id":"EUVD-2024-47150","description":"Ecosystem Agent version 4 \u003c 4.1.5.2597 and Ecosystem Agent version 5 \u003c 5.1.4.2473 did not properly validate SSL/TLS certificates, which could allow a malicious actor to perform a Man-in-the-Middle and intercept traffic between the agent and N-able servers from a privileged network position.","status":"published","published":"2024-08-08T22:04:11Z","modified":"2025-01-07T19:48:40Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T00:04:24.370175Z"}],"ghsa":[{"id":"GHSA-frr6-4w4r-wrwv","title":"Ecosystem Agent version 4 \u003c 4.5.1.2597 and Ecosystem Agent version 5 \u003c 5.1.4.2473 did not...","description":"Ecosystem Agent version 4 \u003c 4.5.1.2597 and Ecosystem Agent version 5 \u003c 5.1.4.2473 did not properly validate SSL/TLS certificates, which could allow a malicious actor to perform a Man-in-the-Middle and intercept traffic between the agent and N-able servers from a privileged network position.","status":"published","published":"2024-08-12T15:30:51Z","modified":"2024-08-12T15:31:01Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:57:55.154597Z"}],"nvd":[{"id":"CVE-2024-5445","description":"Ecosystem Agent version 4 \u003c 4.1.5.2597 and Ecosystem Agent version 5 \u003c 5.1.4.2473 did not properly validate SSL/TLS certificates, which could allow a malicious actor to perform a Man-in-the-Middle and intercept traffic between the agent and N-able servers from a privileged network position.","status":"published","published":"2024-08-12T13:38:37.157Z","modified":"2026-06-17T08:15:58.01Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:10:18.563492Z"}]}}