by Kastro
Paper/Archive/CVE-2024-48143

CVE-2024-48143

digitory multi-channel_integrated_pos — A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS v1.0 allows attackers to gain access to…

EPSS 0.4%CVSS 9.1
critical.is priorityof 100
34
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 34.1.341 × 206.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS v1.0 allows attackers to gain access to the ordering system and place an excessive amount of food orders.

Affected

ProductAffectedFixed inSource
n/an/a–CNA
multi-channel_integrated_pos1.0–CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refdigitory.com/multi-channel-integrated-posrefgithub.com/soursec/CVEs/tree/main/CVE-2024-48143