CVE-2024-30802
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.5%
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
nono source reports it
In short
A flaw in Vehicle Management System version 7.31.0.3_20230412 allows attackers to gain administrator privileges through the login page, bypassing normal user access restrictions.
Technical detail
CWE-1393 vulnerability in the login.html component enables privilege escalation without authentication or with minimal pre-conditions. An attacker can exploit this to obtain administrative access to the system, compromising confidentiality, integrity, and availability of vehicle management data.
Summary generated and translated by AI from the official description.
An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a