CVE-2024-9554CWE-639

Sovell Smart Canteen System Password Reset suanfa.py Check_ET_CheckPwdz201 authorization

Medium · published October 6, 2024

CVSS v4.0
6.3
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic was found in Sovell Smart Canteen System up to 3.0.7303.30513. Affected by this vulnerability is the function Check_ET_CheckPwdz201 of the file suanfa.py of the component Password Reset Handler. The manipulation leads to authorization bypass. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00443 · 37.5th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-10-06T11:31Z
EPSS history
Timeline
  • 06 OCT 11:31Z
    Sovell Smart Canteen System Password Reset suanfa.py Check_ET_CheckPwdz201 authorization
    cvelistv5