MFA Bypass Vulnerability in TOTVS Framework by TOTVS
CVE-2024-55210

9.8CRITICAL

Key Information:

Vendor

TOTVS

Status
TOTVS Framework (Linha Protheus)
Vendor
CVE Published:
9 April 2025

What is CVE-2024-55210?

A security issue in the TOTVS Framework (Linha Protheus) version 12.1.2310 allows attackers to circumvent multi-factor authentication protections by sending specially crafted websocket messages. This enables unauthorized access to sensitive areas of the application, posing significant risks to user security and data integrity.

References

https://github.com/c4cnm/CVE-2024-55210/

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.