CVE-2024-8779CWE-284

The SYSCOM Group OMFLOW - Broken Access Control

High · published September 16, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining control of the server.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00544 · 44.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-09-16T05:51Z
EPSS history
Timeline
  • 16 SEP 05:51Z
    The SYSCOM Group OMFLOW - Broken Access Control
    cvelistv5