CVE-2024-8395criticalCWE-89

FlyCASS Cockpit Access Security System (CASS) SQL Injection

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.7%

exploitation probability

0.7%top 47% of all CVEs

observed exploitation

nono source reports it

FlyCASS CASS and KCM systems did not correctly filter SQL queries, which made them vulnerable to attack by outside attackers with no authentication.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

References