CVE-2024-7898

Katalog CVE

CVSS 9.8 · Critical EPSS 0,55%

Kerentanan Use of Default Credentials pada tosei-corporation online store management system. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability classified as critical was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This vulnerability affects unknown code of the component Backend. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

17 Agustus 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1392: Use of Default Credentials

EPSS (30 hari)

0,55% peluang dieksploitasi; lebih tinggi dari 44,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?submit.386560 advisory pihak ketiga
• https://gist.github.com/b0rgch3n/3136cad95b09e42184fb2d78aae33651 broken link
• https://vuldb.com/?ctiid.274906 permissions required
• https://vuldb.com/?id.274906 permissions required