Lucene search
HistorySep 16, 2024 - 6:15 a.m.
CVE-2024-8779
omflow
system settings
vulnerability
remote
privilege escalation
syscom group
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining control of the server.
Affected configurations
Node
syscomgoomflowRange1.1.6.0–1.2.1.3
Related
vulnrichment
vulnrichment
CVE-2024-8779 The SYSCOM Group OMFLOW - Broken Access Control
2024-09-16 05:51:45
cve
cve
CVE-2024-8779
2024-09-16 06:15:12
cvelist
cvelist
CVE-2024-8779 The SYSCOM Group OMFLOW - Broken Access Control
2024-09-16 05:51:45
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2024-8779