Remote Access Vulnerability in Electronic Official Document Management System
CVE-2024-6737

8.8HIGH

Key Information:

Vendor

2100 TECHNOLOGY

Status
Electronic Official Document Management System
Vendor
CVE Published:
15 July 2024

What is CVE-2024-6737?

The Electronic Official Document Management System developed by 2100 TECHNOLOGY has an improper implementation of access controls. This vulnerability allows remote attackers, who possess only standard user privileges, to manipulate the account settings. By exploiting this weakness, they can create unauthorized administrator accounts, leading to potential data breaches and unauthorized access to sensitive information. Organizations using this system should immediately assess their security posture and apply necessary measures to mitigate this risk.

References

https://www.twcert.org.tw/tw/cp-132-7923-46df3-1.html
https://www.twcert.org.tw/en/cp-139-7924-85606-2.html

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.