CVE-2024-47086highCWE-302

CVE-2024-47086: high-severity vulnerability in Apex Softcell LD DP Back Office

OTP Bypass Vulnerability

Published

Follow this CVE+ Monitor LD DP Back Office

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.5%
This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API response. Successful exploitation of this vulnerability could allow the attacker to bypass OTP verification for other user accounts.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Apex Softcell · LD DP Back Office
Related CVEs — Apex Softcell LD DP Back Office

In the same product, most dangerous first.

CVE-2024-47085HIGHParameter Manipulation VulnerabilityEPSS 0.4%