PT-2024-23619 · Unknown · Vehicle Management System

Published 2024-05-10 · Updated 2024-11-18 · CVE-2024-30802

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vehicle Management System version 7.31.0.3 20230412

Description The issue allows an attacker to escalate privileges via the login.html component.

Recommendations For Vehicle Management System version 7.31.0.3 20230412, consider restricting access to the login.html component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-1393

Related Identifiers

CVE-2024-30802

Affected Products

Vehicle Management System

References · 5

• 🔥 https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-30802.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-30802 · Security Note
• https://github.com/WarmBrew/web_vul/blob/main/TTX.md · Note
• https://t.me/cvenotify/93662 · Telegram Post
• https://t.me/cvenotify/102038 · Telegram Post