CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

CVE-2024-40458 affects Ocuco Innovation Tracking.exe 2.10.24.51. The issue allows a local attacker to escalate privileges through modification of TCP packets. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, no user interaction, and impact to Confidentiality, Integr...

Ocuco Innovation 安全漏洞

Ocuco Innovation is an integrated Laboratory Management System LMS from Ocuco Ireland, designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.51, which stems from a modification of TCP...

Ocuco Innovation 安全漏洞

Ocuco Innovation is a comprehensive Laboratory Management System LMS from Ocuco Ireland, designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.51, which stems from an application manager...

CVE-2024-40459

An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privileges via the application manager function...

CVE-2024-40460

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the JOBENTRY.EXE...

CVE-2024-40460

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the JOBENTRY.EXE...

PT-2025-22557 · Ocuco Innovation · Invclient.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - INVCLIENT.EXE version 2.10.24.5 Description: The issue allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco Innovation - INVCLIENT.EXE versi...

Ocuco Innovation 安全漏洞

Ocuco Innovation is an integrated Laboratory Management System LMS from Ocuco Ireland, designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.51, which stems from an elevation of privilege...

CVE-2024-41199

An issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...

CVE-2024-40461

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE component...

CVE-2024-41195

An issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...

Ocuco Innovation 安全漏洞

Ocuco Innovation is an integrated Laboratory Management System LMS from Ocuco Ireland designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.13, which stems from an authentication bypass...

CVE-2024-41199

CVE-2024-41199 affects Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16. A crafted TCP packet can bypass authentication and escalate to Administrator, over a NETWORK low-complexity vector with HIGH impact on confidentiality, integrity and availability. Reports indicate an authenticated bypass, enabl...

PT-2025-22551 · Ocuco Innovation · Appmanager.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation APPMANAGER.EXE version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the application manager function. Recommendations: For Ocuco Innovation APPMANAGER.EXE version 2.10.24.51, consider...

PT-2025-22553 · Ocuco · Ocuco Innovation

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE component. Recommendations: For Ocuco Innovation version 2.10.24.51, consider restricting access to the...

CVE-2024-40461

CVE-2024-40461 affects Ocuco Innovation v2.10.24.51, where the STOCKORDERENTRY.EXE component allows local privilege escalation. CVSS v3.1 metrics indicate local, low complexity with low privileges required, resulting in high confidentiality, integrity, and availability impact. Exploitation status...

CVE-2024-40462

CVE-2024-40462 affects Ocuco Innovation v2.10.24.51; local privilege escalation via SETTINGSVATIGATOR.EXE is reported. Root cause is described as privilege escalation, but no concrete exploit path or fix details are provided in the extracted documents. PT-Security notes no information about a new...

PT-2025-22554 · Ocuco · Ocuco Innovation

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the SETTINGSVATIGATOR.EXE component. This enables the attacker to gain higher access levels, potentially leading to unauthorized...

CVE-2024-41196

CVE-2024-41196 affects Ocuco Innovation – REPORTSERVER.EXE v2.10.24.13. The issue is an authentication bypass in the REPORTSERVER.EXE component that allows an attacker to escalate privileges to Administrator via a crafted TCP packet. Several connected sources corroborate the authentication bypass...