Authentication Bypass in Socomec Easy Config System

CVE-2024-45370

What is CVE-2024-45370?

An authentication bypass vulnerability has been identified in the User profile management functionality of Socomec Easy Config System version 2.6.1.0. This vulnerability allows attackers to gain unauthorized access by exploiting specially crafted database records. By manipulating the local database, an attacker can trigger this vulnerability, enabling them to bypass standard authentication mechanisms and potentially compromise the system integrity.

References