Paper/Archive/CVE-2024-26520

CVE-2024-26520

xiongwei_technology restaurant_digital_comprehensive_management — An issue in Hangzhou Xiongwei Technology Development Co., Ltd.

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 43.6.436 × 208.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

restaurant_digital_comprehensive_managementv1–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refidssgmcc.github.io/aran.github.io/2.html