Traffic Injection Vulnerability Affects Personnel Attendance and Access Control Systems
CVE-2024-10534

9.8CRITICAL

Key Information:

Vendor

Dataprom Informatics

Status
Personnel Attendance Control Systems (pacs) / Access Control Security Systems (acss)
Vendor
CVE Published:
15 November 2024

What is CVE-2024-10534?

An Origin Validation Error vulnerability has been identified in Dataprom Informatics Personnel Attendance Control Systems (PACS) and Access Control Security Systems (ACSS). This flaw allows for potential traffic injection, which could facilitate unauthorized data access and manipulation. The affected versions prior to 2024 may expose users to significant risks, making prompt mitigation necessary to safeguard against exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Personnel Attendance Control Systems (PACS) / Access Control Security Systems (ACSS) 0 < 2024

References

https://www.usom.gov.tr/bildirim/tr-24-1856

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yusuf Kamil CAVUSOGLU
Havelsan Inc.
JSON
.