CVE-2024-37998

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.40), SICORE Base system (All versions < V1.4.0). The password of administrative accounts of the affected applications can be reset without requiring the knowledge of the current password, given the auto login is enabled. This could allow an unauthorized attacker to obtain administrative access of the affected applications.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-620

Affected software

No affected versions have been published.

Timeline

Published: Jul 22, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-379997.8A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes as a trusted accoun CVE-2024-38006.1Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names. Only a pa CVE-2024-380028.8The workflow component in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, CVE-2024-38016.1Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters. O CVE-2024-380108.0Secure Boot Security Feature Bypass Vulnerability CVE-2024-380118.0Secure Boot Security Feature Bypass Vulnerability CVE-2024-380136.7Microsoft Windows Server Backup Elevation of Privilege Vulnerability CVE-2024-380147.8Windows Installer Elevation of Privilege Vulnerability CVE-2024-380157.5Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability CVE-2024-380167.8Microsoft Office Visio Remote Code Execution Vulnerability CVE-2024-380175.5Microsoft Message Queuing Information Disclosure Vulnerability CVE-2024-380188.8Microsoft SharePoint Server Remote Code Execution Vulnerability