Remote Access to Sensitive Data through Encrypted Database Credentials

CVE-2024-1344

What is CVE-2024-1344?

A vulnerability in LaborOfficeFree allows attackers to exploit encrypted database credentials. Specifically, this issue affects version 19.10, enabling unauthorized users to read and extract sensitive username and password data from 'LOF_service.exe' and 'LaborOfficeFree.exe' files. Once compromised, adversaries can gain remote access with root-like privileges, posing significant risks to systems and data integrity.

References